A security network middleware for identity authentication, and a method and apparatus for implementing the same

Abstract

The invention discloses a security network middleware for identity authentication, a method and apparatus for implementing the same. The middleware comprises an interface layer, a function layer and an engine layer. The interface layer is located on top of the function layer and is used for providing a channel for the client to call the middleware. The function layer is located on top of the engine layer, and is used for providing service interface to the interface layer, and is responsible for service realization of the middleware. The service includes signature, check mark, encryption and decryption. The engine layer comprises a national secret algorithm engine, an OpenSSL algorithm engine and a hardware algorithm engine. The middleware of the application is a front terminal of the authentication platform for collecting user information, which provides protection for safely collecting user identity information and avoids malicious use of the user identity information after the third-party network application collects the user identity information. At the same time, the user identity information is avoided to be stolen in the transmission process from the client to the authentication platform and from the authentication platform to the third-party network application.

Description

technical field [0001] The present application relates to the technical field of network security, in particular to a secure network middleware for identity authentication and its implementation method and device. Background technique [0002] It is a very common business scenario to confirm user identity information on the client. Because the process of user identity information authentication has a remote nature, the authentication platform uses some authentication methods such as portraits, PIN codes, fingerprints and other personal privacy information to verify the identity of the user's claimed identity and his real identity. [0003] Generally speaking, the authentication platform needs to collect the user identity information of the client through a third-party network application. However, third-party network applications sometimes steal user identity information and maliciously use user identity information, resulting in leakage of user identity information and ult...

AI Technical Summary

Problems solved by technology

[0005] This application provides a secure network middleware for identity authentication and its implementation method and device to solve the problem that in the prior art, when the authentication platform collects the user's identity information through a third-party network application, the user's identity information is blocked by a third party The Problem with Web App Theft

Images