Information verification method

Abstract

The invention presents an information verification method including the following steps: (1) a client sends user registration information to a server to request for user identity verification, the server is used for verifying user identity, and the server generates a key container file corresponding to the client according to the user registration information after verification succeeds; (2) the client downloads the key container file from the server or gets the key container file by updating, wherein the key container file contains to-be-matched information and the public-private key pair of asymmetric keys or symmetric keys, and the information is bound to the key container file for client authentication; and (3) after actual information in the client is matched with the to-be-matched information, when the application service of the client requires user identity authentication, the client and the server conduct two-way authentication based on the asymmetric keys or one-way authentication based on the symmetric keys. The process of verification is simplified greatly and the cost of verification cost is lowered while the reliability and safety of verification are improved greatly.

Description

technical field

[0001] The invention belongs to the technical field of information security and relates to an information verification technology. Background technique

[0002] With the rapid development of mobile communication and Internet technology, there are more and more applications for personal identity authentication in banking, securities, business, trade, office, education and other industries, and the security of personal identity authentication has also attracted extensive attention. . At present, authentication technologies such as dynamic tokens, USB shields, and fingerprints are commonly used in the Internet field. However, these technologies generally require users to carry certified hardware products with them, which is very inconvenient. SMS verification is relatively simple and has a good user experience, but each verification requires a text message to send a plain text verification code to the user, which not only has high verification costs, but also ...

Images