Authentication method and device

Abstract

The invention discloses an authentication method and a device. The method comprises the following steps: intercepting a first authentication request sent to an account authentication server by a business application server, wherein the first authentication request comprises an account and the authentication information; acquiring the target authentication information corresponding to the account from the third-party server; and responding to the first authentication request according to the authentication information and the target authentication information. The technical scheme disclosed by the invention can realize the account authentication based on the third party, and the risk of password leakage is lowered.

Description

technical field [0001] The present disclosure relates to the technical field of information security, in particular to an authentication method and device. Background technique [0002] Single sign-on (SSO, Single Sign On) means that in an environment where multiple application systems coexist, users only need to log in once to access all mutually trusted application systems. The fields involved in SSO can be roughly divided into three types: SSO between social websites, departmental SSO, and enterprise-level SSO. Among them, SSO between social websites mainly involves the openness of account information, and whether it can be successfully implemented mainly depends on various Whether website account management follows the same standard protocol; department-level SSO is relatively simple, and is suitable for scenarios involving few systems, which can be implemented by technicians through programming; enterprise-level SSO involves many systems, including client / server (C / S) ...

AI Technical Summary

Problems solved by technology

However, due to the closed nature of Microsoft's commercial products, it is difficult for the client software Outlook to integrate with the single sign-on service and the two-stage authentication service based on Microsoft's OWA mail server, and it is difficult for Outlook to access the SSO service; this has the following problems: a) The user needs to enter the account number and password every time they log in to the system, and the user experience is poor; b) The mail service is exposed to the external network environment. When hackers understand the system login protocol, they will use brute force to scan the company's internal accounts for weak passwords , leading to intranet security vulnerabilities

Although Microsoft has also launched the Microsoft commercial single sign-on solution, the protocol supported by the Microsoft commercial single sign-on solution is limited and cannot meet the complex internal information requirements of the enterprise. For example, the Microsoft commercial single sign-on solution may not support the two-stage authentication required by users

Images