A multiple certification method and system

Abstract

The invention relates to a multiple certification method and system adopting a customized rule. A certification host, a user terminal and a certification executing device are adopted. Multiple certification design is adopted, verification is performed on users through the user terminal which uses random challenge information and a preset operation regulation, peep attack and brute force cracking attack are defended, even if the hardware is lost, an illegitimate users still cannot normally use the user terminal to pass through the verification of the certification host. A hand-drawn graph having customized meaning is used as verification information in a second certification phase, the brute force cracking attack is avoided, the calculating capability of the certification user terminal andthe certification host can be fully utilized, redundancy information is added into interaction, and playback attack is defended. The system can be used as an access control system or an access controlsystem of an information device.

Description

technical field [0001] The present invention relates to an authentication method and a corresponding system, more specifically, the present invention relates to a multi-authentication method and system using customized rules, which are widely applicable to various information systems based on password authentication, especially for access control systems , security systems and other technical fields. Background technique [0002] There are various types of authentication systems in the prior art, such as the widely used access control system or security system, whose function is to authenticate the user's identity, and judge whether to authorize or release the user according to the authentication result. [0003] According to the different input methods of authentication information, the current authentication systems (such as access control systems) can be roughly divided into three categories: password input type, card type and biometric type. In password-input authentica...

AI Technical Summary

Problems solved by technology

Although this existing technology constitutes a two-level authentication, since the generation of the dynamic password is automatically generated by the system according to a specific algorithm, in fact, the dynamic password can be obtained only by passing the fingerprint authentication, and the security protection level of the whole system is not high. Significantly improved, and there is also the risk of false authentication due to counterfeit fingerprint information

Images