A digital identity authentication method and system based on a secure two-dimensional code

Abstract

The invention provides a digital identity authentication method based on a secure two-dimensional code. A third-party application initiates an authorization login request; the identity authentication SDK obtains a session key from the server; the identity authentication SDK uses the session key to process the third-party application information Encrypt, and send the encrypted information and authorized login request to the server; the server decrypts the third-party application information through the session key, and generates a QR code and QR code url, and passes the QR code url through the key After encryption, the identity authentication SDK obtains the encrypted QR code url; the identity authentication SDK decrypts the encrypted QR code url, and then the third-party application jumps according to the QR code url to display the QR code; the user scans the QR code code to authenticate and authorize a third-party application to log in; the present invention also provides a digital identity authentication system based on a secure two-dimensional code to ensure the security of the authorization process and secure login of the third-party application.

Description

technical field [0001] The invention relates to a digital identity authentication method and system based on a secure two-dimensional code. Background technique [0002] With the development of information technology, Internet identity authorization is used more and more frequently, and mainstream Internet applications provide third-party login portals. For example, CSDN can use QQ, WeChat authorized login, etc. [0003] Disadvantages of the current common identity authentication account plus password: easy to be obtained by keylogging and other methods; scratch card verification Disadvantages: use sniffing and monitoring software to obtain the location data and content of the static static code, intercepted multiple times, it can be complete Obtain the static password and graphic verification code of the entire scratch card Disadvantages: Using OCR technology can also obtain the content of graphic verification codes, soft certificates Shortcomings Attackers can use Trojan h...

AI Technical Summary

Problems solved by technology

[0003] Disadvantages of the current common identity authentication account plus password: easy to be obtained by keylogging and other methods; scratch card verification Disadvantages: use sniffing and monitoring software to obtain the location data and content of the static static code, intercepted multiple times, it can be complete Obtain the static password and graphic verification code of the entire scratch card Disadvantages: Using OCR technology can also obtain the content of graphic verification codes, soft certificates Shortcomings Attackers can use Trojan horse virus tools to steal users' soft certificates; SMS verification codes Disadvantages: mobile phones The verification code can be intercepted by the SMS hijacking tool, and even the SMS will not be displayed on the user's mobile phone, and it will be sent directly to the attacker's mobile phone, and the attacker can easily steal funds

Images