Safe operation legality verification method and device

Abstract

The invention discloses a safety operation legality verifying method. The safety operation legality verifying method is applied to a first electronic device, and the first electronic device can verify the legal identity of a client side user in a network environment. The method comprises the steps that S1, the first electronic device receives a safety operation command of a client side; S2, the first electronic device executes safety operation corresponding to the safety operation command and stores result data; S3, the first electronic device generates verification information according to the safety operation command; S4, the first electronic device carries out first verifying operation according to the verification information, if verification succeeds, the first electronic device sends the result data of the safety operation to the client side, and otherwise, the first electronic device generates a canceling code and returns the canceling code to the client side. The invention further discloses a safety operation legality verifying device.

Description

technical field [0001] The invention relates to the field of computer and communication security, in particular to a method and device for verifying the legality of a security operation. Background technique [0002] In online transactions, it is necessary to ensure the security of the server, communication channel, and client. All three are indispensable. If any one of them is unsafe, secure transactions cannot be realized. From the perspective of the client, ensuring that the user of the client has a legal identity is the first factor that needs to be considered. [0003] In the prior art, the methods for authenticating the legal identity of the client user mainly include: using a smart password key (USB Key), which contains a cryptographic algorithm private key representing the identity of the user. When it is necessary to authenticate the identity of the user, Use this private key to make a digital signature, and the server verifies the signature to verify the legal ide...

AI Technical Summary

Problems solved by technology

[0005] Based on the above two reasons, it can be seen that in this technical field, digital signatures or second channel verification methods cannot guarantee the verification of the user's legal identity.

Images