An authentication method based on usb-key

Abstract

The invention discloses a USB-key-based authentication method and system. The method includes: preset a PIN code and calculate a hash value; the client verifies the PIN code and generates a verification instruction, and encrypts the verification instruction to obtain the first encryption code; parses the first Encrypt the password to obtain the verification instruction, generate the first random code, encrypt the first random code to obtain the second encrypted code; parse the second encrypted code to obtain the first random code, encrypt the first random code to obtain the third encrypted code, encrypt The third encrypted code is used to obtain the fourth encrypted code; the fourth encrypted code is analyzed to obtain the third encrypted code, the first random code is encrypted to obtain the fifth encrypted code, and if the fifth encrypted code is consistent with the third encrypted code, the verification is passed. The system is used to execute the method. The present invention establishes a basic verification system based on PKI / CA to improve data transmission security, processes the later verification process based on the session key of the previous verification, and can effectively avoid eavesdropping on data and prevent PIN code leakage.

Description

technical field [0001] The invention relates to the technical field of USB-key authentication, in particular to an authentication method based on a USB-key. Background technique [0002] With the development of the Internet, identity authentication has been applied in e-commerce, online banking transactions, and personal data confidentiality. Among various identity authentication methods, the smart password key (USB-key) is widely used as a safe and reliable identity authentication method. As an identity authentication device, USB-key can realize key information such as identity authentication, digital signature, access control, data encryption and decryption, and storage of keys and passwords. Usually, USB-key is used for identity authentication with the hardware itself. , the stored key and the PIN code set by the user are used as the basis for personal identity authentication. Among them, the PIN code is used as the authorization method for the user to access the hardwa...

AI Technical Summary

Problems solved by technology

[0004] Based on the deficiencies in the prior art, the purpose of the present invention is to provide a safe and effective PIN code identity authentication method for USB-key to solve the problem. After the PIN code is directly encrypted and decrypted at the client and USB-key Compared with the existing PIN code leakage risk

Images