Ciphertext-Based Authentication Methods

Abstract

The present invention proposes a ciphertext-based authentication method, which includes: the data processing server pushes one or more first restricted keys and one or more second restricted keys to the user's mobile terminal periodically or based on a request; When the user initiates a security information interaction process through the mobile terminal, the security application resident on the mobile terminal uses one of the one or more first restricted keys to generate an application ciphertext, and uses the one or more One of the second restricted keys generates user ciphertext, and then sends the application ciphertext and user ciphertext to the security information interaction terminal; after receiving the application ciphertext and user ciphertext, the security information interaction terminal A security information interaction request is constructed, and the security information interaction request is sent to the data processing server for subsequent security information interaction process. The method disclosed in the present invention has enhanced safety and is convenient to use.

Description

technical field [0001] The present invention relates to an identity verification method, and more specifically, to a ciphertext-based identity verification method. Background technique [0002] At present, with the increasingly widespread application of computers and networks and the increasing variety of business types in different fields, the use of mobile terminals to implement security information interaction processes (that is, data interaction processes that require high security, such as payment transactions in the financial field )become more and more important. [0003] In existing technical solutions, before implementing the actual security information interaction process, it is typically necessary to complete the user's identity verification operation, and only initiate a security information interaction request (such as a payment order containing a payment order) only when the identity verification is successful request), the following two authentication methods...

AI Technical Summary

Problems solved by technology

[0004] However, the above-mentioned existing technical solutions have the following problems: (1) Since the personal password needs to be input on the security information interaction terminal before the actual security information interaction process is implemented, there is a potential risk of the personal password being used maliciously; ( 2) Since the security information exchange request is initiated only when the identity verification is successful, there is a potential risk of being illegally eavesdropped and attacked; (3) Because it needs to use a specific security unit or pass through a public Internet channel, the cost is high and Inconvenient to use

Images