Dynamic password for electronic key

Abstract

The invention discloses a dynamic password for an electronic key. The dynamic password is characterized by comprising a user identity authentication process of the dynamic password and a process of creating a session after a server receives a request. Preferably, the user identity authentication process of the dynamic password comprises the following steps that: a user starts a browser III; the user inputs a website linkage address; and the user sends a session request to the server. In the dynamic password for the electronic key, a system automatically generates a random character string and saves the random character string until a session ends every time the session is created, so that user passwords generated by different random character strings every time are different; corresponding relationships between fixed user numbers and different dynamic passwords are formed; data access which is performed by re-creation of a session through the browser III is rejected by the server even if an illegal user illegally acquires an ID number and a password used when the user accesses the server at a certain time; and very high security performance is achieved.

Description

technical field [0001] The invention relates to a dynamic password of an electronic key. Background technique [0002] Password is a kind of authentication and access control mechanism commonly used in computer applications at present. In traditional network applications, a frequently used user account management mode is a static correspondence between user names and passwords. That is: when the user logs in to the remote server, the system requires the user to enter the user name and a few passwords to determine the legal identity of the user. The user can regularly modify his password as necessary, and within a certain period of time, the user's password is fixed. of. This method of static user password has the following security risks: ①The password may be intercepted and monitored during network transmission; ②The password may be attacked by a dictionary. The possibility of cracking; ③ the possibility of non-subjective disclosure by the user in the process of using th...

AI Technical Summary

Problems solved by technology

This method of static user password has the following security risks: ①The password may be intercepted and monitored during network transmission; ②The password may be attacked by a dictionary. The possibility of cracking; ③ the possibility of non-subjective disclosure by the user in the process of using the password; ④ the possibility of data loss due to the user forgetting the password