Threat level-based multi-factor identity authentication method

Abstract

The invention discloses a threat level-based multi-factor identity authentication method, which comprises the following steps: building an identity authentication model; performing service activity threat analysis; generating an authentication strategy; and performing security authentication. The invention provides the threat level-based multi-factor identity authentication method for defects of acurrent identity authentication mode. During application, a corresponding identity authentication strategy method is formulated according to different security threat levels in an application scene;a multi-factor identity authentication model with a flexible mechanism is provided according to the identity authentication strategy; the model adopts a modularized design, and can be flexibly replaced as required; an authentication template method is provided according to parameter weights in the authentication strategy; the method takes a comprehensive consideration of the threat level, the authentication strength, the computing cost, the time, the convenience and other factors to adaptively dynamically select corresponding authentication modules; and multi-factor identity authentication meeting requirements at different security levels is flexibly performed through standard interface design and integration.

Description

technical field [0001] The invention relates to identity authentication, in particular to a threat-level-based multi-factor identity authentication method. Background technique [0002] With the rapid development of cyberspace-related technologies, the security situation is becoming more and more severe. According to research, 81.1% of security incidents are related to identity, and activities such as identity theft, destruction, and identity forgery are becoming more and more frequent. However, in the traditional network identity authentication methods, the authentication methods used are often single and simple. Facing the increasing network computing power and various network attacks, some original security solutions have relatively large security risks. , it is increasingly difficult to meet the current security application requirements. Therefore, as identity authentication is a key component and security cornerstone of information systems, more efficient and secure id...

AI Technical Summary

Problems solved by technology

[0005] In the existing identity authentication schemes, a single account password identity authentication method is widely used. The password is a string of static data set by the user himself. , but in other links of the authentication process, it is easy to be intercepted and cracked by hackers, and there are security risks such as theft, brute force cracking, and replay attacks. Once the password is leaked, it may be impersonated by illegal nodes

In addition, when users have multiple account passwords, they need to change passwords regularly, which will increase the complexity of user use and maintenance

[0006] 2. In the identity authentication method using the PKI / CA public key system, there is a certificate authority (CertificateAuthority, CA) that may issue an illegal certificate, which may cause a security risk of a man-in-the-middle attack. For example, in 2011, DignitaryCA issued an illegal Google certificate. This certificate is used to attempt a man-in-the-middle attack on Google users, which compromises the security of the entire system

[0007] 3. In some existing solutions, the identity authentication method is fixed during design and user registration, without considering changes in the complex application environment of the system in the future and user experience, and the authentication method is not flexible

[0008] Therefore, in most of the existing schemes, there are certain hidden dangers in the use of single-factor or fixed multi-factor authentication methods, which cannot flexibly respond to security threats in different application scenarios, and effectively make identity authentication methods that meet the needs of different security levels.

Images