A dynamic password-based authentication method, device and storage medium

Abstract

The invention discloses an authentication method and authentication equipment based on a dynamic password, and a storage medium, which belong to the technical field of identity authentication. The authentication method comprises the steps that: a client receives a login request from a user and sends the login request to an authentication terminal, wherein the login request comprises the dynamic password, and the dynamic password comprises a fixed password and a non-forbidden dynamic code; the authentication terminal verifies the received dynamic password according to the saved fixed password and non-forbidden dynamic code; the authentication terminal returns a login result to the client according to a verification result, and updates forbidden dynamic codes according to the number of the saved forbidden dynamic codes and the non-forbidden dynamic code contained in the dynamic password when the verification result is that the verification is passed; and the client receives the login result returned by the authentication terminal. The authentication method and the authentication equipment realize the identity authentication based on the dynamic password without the need of additionalequipment, and are convenient and safe.

Description

technical field [0001] The invention relates to the technical field of identity authentication, in particular to an authentication method, device and storage medium based on a dynamic password. Background technique [0002] With the rapid development of science and technology, various intelligent identity authentication methods have emerged as the times require, such as iris authentication, palmprint authentication, and face authentication. However, for network identity authentication, the traditional authentication method based on user name and password still occupies the mainstream, that is, the security of the account is mainly guaranteed by the password. Existing passwords are usually divided into fixed passwords and dynamic passwords. Among them, fixed passwords are easy to be stolen, which is likely to cause security risks; and dynamic passwords are not used to be stolen although they are changed every time. However, the realization of dynamic passwords generally requi...

AI Technical Summary

Problems solved by technology

However, for network identity authentication, the traditional authentication method based on user name and password still occupies the mainstream, that is, the security of the account is mainly guaranteed by the password.

Existing passwords are usually divided into fixed passwords and dynamic passwords. Among them, fixed passwords are easy to be stolen, which is likely to cause security risks; and dynamic passwords are not used to be stolen although they are changed every time. However, the realization of dynamic passwords generally requires additional devices, such as dynamic password tokens, mobile devices capable of receiving dynamic verification codes, etc.; and when these devices are lost or damaged, it will still cause inconvenience and account security issues

Images