A secure network middleware for identity authentication and its implementation method and device

Abstract

The application discloses a secure network middleware for identity authentication and its implementation method and device, the middleware includes an interface layer, a function layer and an engine layer; the interface layer is located above the function layer, and is used for To provide a channel for the client to call the middleware; the functional layer is located above the engine layer, and is used to provide a business interface to the interface layer, and is responsible for the business realization of the middleware, and the business includes signature, verification, Encryption and decryption; the engine layer includes a national secret algorithm engine, an OpenSSL algorithm engine and a hardware algorithm engine. The middleware of this application is the front-end terminal for the authentication platform to collect user information, which provides protection for the safe collection of user identity information and prevents third-party network applications from maliciously using user identity information after collecting user identity information. At the same time, the user identity information is prevented from being stolen during the transmission process from the client to the authentication platform, and from the authentication platform to the third-party network application.

Description

technical field [0001] The present application relates to the technical field of network security, in particular to a secure network middleware for identity authentication and its implementation method and device. Background technique [0002] It is a very common business scenario to confirm user identity information on the client. Because the process of user identity information authentication has a remote nature, the authentication platform uses some authentication methods such as portraits, PIN codes, fingerprints and other personal privacy information to verify the identity of the user's claimed identity and his real identity. [0003] Generally speaking, the authentication platform needs to collect the user identity information of the client through a third-party network application. However, third-party network applications sometimes steal user identity information and maliciously use user identity information, resulting in leakage of user identity information and ult...

AI Technical Summary

Problems solved by technology

[0005] This application provides a secure network middleware for identity authentication and its implementation method and device to solve the problem that in the prior art, when the authentication platform collects the user's identity information through a third-party network application, the user's identity information is blocked by a third party The Problem with Web App Theft

Images