Identity authentication server and identity authentication token

An identity authentication and server technology, applied in the field of identity authentication security, can solve problems such as non-repudiation, identity fraud, token duplication, etc., and achieve the effect of preventing replay attacks and solving password leakage

CN108092776AActive Publication Date: 2018-05-29NARI INFORMATION & COMM TECH
3 Cites 42 Cited by

Patent Information

Authority / Receiving Office
CN · China
Current Assignee / Owner
Publication Date
2018-05-29

Smart Images

  • Figure 1
    Figure 1
  • Figure 2
    Figure 2
  • Figure 3
    Figure 3
Patent Text Reader

Abstract

The invention discloses an identity authentication server and an identity authentication token, wherein the identity authentication server comprises a standard FIDO server and a storage space for storing keys, namely, a database, which are connected with each other; the identity authentication token is based on physical unclonable and the FIDO U2F protocol and comprises a U2F module, and a PUF module,a TRNG module, a USB module and an interaction module, which are connected with the U2F module, and a touch module connected with the interaction module; and an identity token interacts with a client browser, and the client browser in turn interacts with an FIDO server in the authentication server. According to the identity authentication server disclosed by the invention, the physical unclonable function is combined with the FIDO, the uniqueness and non-replicability of the token are ensured by the physical unclonable function, and the accuracy of the user identity and the non-defective modification and non-repudiation of the operation are ensured by the FIDO.
Need to check novelty before this filing date? Find Prior Art

Description

technical field

[0001] The invention belongs to the technical field of identity authentication security, and in particular relates to an identity authentication server and an identity authentication token. Background technique

[0002] With the continuous development of the global energy Internet, various businesses within and between enterprises rely more and more on information systems and network platforms. This new situation puts forward higher and higher requirements for resource management modes of power enterprises such as human resource management, financial management, production management, and enterprise management. The core business in the power enterprise information system, such as the recruitment of human resources involved in the introduction of talents in the human resources business, the linkage between key talents between enterprises, the key business in financial management in the financial transactions between enterprises and between enterprises, and in ...

Examples

Embodiment Construction

[0055] The present invention will be further described below in conjunction with the accompanying drawings. The following examples are only used to illustrate the technical solution of the present invention more clearly, but not to limit the protection scope of the present invention.

[0056] Such as figure 1 As shown, an identity authentication server includes a standard FIDO server connected to each other and a storage space for storing keys, that is, a database.

[0057] Such as figure 2 As shown, an identity authentication token, based on the physical unclonable and FIDO U2F protocol, includes a U2F module, a PUF module connected to the U2F module, a TRNG module, a USB module, an interactive module, and a touch module connected to the interactive module, LED lights;

[0058] The functions of the U2F module are mainly to implement encryption algorithms, human-computer interaction, and communication with the outside world. There are storage space, encryption and decrypt...