Intelligent card safety authentication method and intelligent card safety authentication system on basis of data and short message technologies

Abstract

The invention discloses an intelligent card safety authentication method and an intelligent card safety authentication system on the basis of data and short message technologies. The intelligent cardsafety authentication method includes intercepting and capturing to-be-signed information transmitted by a business platform, encrypting the to-be-signed information to obtain first encrypted information and transmitting the first encrypted information to an SIM (subscriber identification module) card by the aid of the data and short message technologies; decrypting the first encrypted informationby the aid of safety authentication application after the first encrypted information is received by the SIM card, signing the decrypted to-be-signed information and encrypting obtained signed information to obtain second encrypted information; receiving the second encrypted information transmitted by the SIM card and decrypting the second encrypted information; transmitting the decrypted signedinformation to the business platform to allow the business platform to verify signature for the decrypted signed information so as to complete safety authentication. The intelligent card safety authentication method and the intelligent card safety authentication system have the advantages that the transmitted information is encrypted, and the safety authentication can be implemented between the business platform and the SIM card by the aid of signature functions of the safety authentication application and signature verification functions of the business platform.

Description

technical field [0001] The invention relates to the field of information communication, in particular to a smart card security authentication method and system based on data short message technology. Background technique [0002] At present, most application platforms use user name and password as a way of security authentication and login. On the one hand, due to the inconsistent user name and password rules of each platform, users often forget their passwords, which has a great impact on user experience. ; On the other hand, due to the emergence of various attack methods to steal user passwords such as phishing websites and credential databases, the traditional security authentication login method of user name and password has been greatly challenged. [0003] In addition, some platforms also improve the security of authentication by sending text messages such as "SMS verification code" or "SMS notification". Risks such as being attacked, intercepted, and tampered with wi...

AI Technical Summary

Problems solved by technology

[0002] At present, most application platforms use user name and password as a way of security authentication and login. On the one hand, due to the inconsistent user name and password rules of each platform, users often forget their passwords, which has a great impact on user experience. On the other hand, due to the emergence of various attack methods to steal user passwords such as phishing websites and credential databases, the traditional user name and password, which is a secure authentication login method, has been greatly challenged.

[0003] In addition, some platforms also improve the security of authentication by sending text messages such as "SMS verification code" or "SMS notification". The risk of being attacked, intercepted, tampered with, etc. greatly reduces the security of authentication between the business platform and mobile communication devices

Images