Login verification method and system based on SM3 algorithm and random challenge code

Abstract

The invention discloses a login verification method and system based on an SM3 algorithm and a random challenge code. The method comprises the following steps: performing summary calculation based onthe SM3 algorithm to store registration information of a user; and based on the stored registration information, performing login verification on the login information of the user based on double login random numbers. The system comprises a storage module and a verification module. According to the login verification method and system, the registration information of the user is stored based on the SM3 algorithm, compared with the existing international algorithms such as MD5, the irreversible SM3 algorithm can avoid the playback of the user login data and improve the security of the login data. In addition, based on the stored registration information, the login verification is performed on the login information of the user based on double login random numbers, thus improving the randomness and one-time of the login data, further preventing the replay attack, the data randomness and the security are high, and the login verification method and system can be widely applied to the information security field.

Description

technical field [0001] The invention relates to the field of information security, in particular to a login verification method and system based on an SM3 algorithm and a random challenge code. Background technique [0002] Replay: Replay Attacks, also known as replay attacks, replay attacks, or Freshness Attacks, refer to the attacker sending a packet that the destination host has received, especially in the authentication process, for The package received by authenticating the user's identity is used to deceive the system. It is mainly used in the identity authentication process and destroys the security of authentication. [0003] The SM3 password digest algorithm is the Chinese commercial password hash algorithm standard announced by the State Cryptography Administration of China in 2010. The SM3 algorithm is suitable for digital signature and verification in commercial cryptographic applications, and is an improved algorithm based on SHA-256. The SM3 algorithm adopts ...

AI Technical Summary

Problems solved by technology

[0005] At present, international algorithms such as MD5 are generally used to calculate the digest of encrypted data, but the number of digits of the digest information of international algorithms such as MD5 is relatively short, and the collision attack on it is becoming more and more easy to realize with the development of computer capabilities. less secure

In addition, international algorithms such as MD5 use timestamps as the only login challenge code, and the randomness of the data is not high. Such an implementation mechanism has certain risks in terms of security.

Images