OAuth2.0-based WEB authentication method of password service middleware

Abstract

The invention provides an OAuth2.0-based WEB authentication method of password service middleware. The method comprises the following steps: firstly, the password service middleware applies for authorization authentication to a verification server; the password service middleware performs DES encryption on user information submitted by a browser and a smart password key PIN code, and then sends the same to the verification server; after receiving a request, the verification server verifies the information of the password service middleware; the verification server verifies the decrypted user information and the PIN code, performs Subject login through a background server, encrypts an authorization permission certificate, and returns the authorization permission certificate to the middleware; after the middleware receives the authorization permission certificate, the middleware performs Subject login, and then sends a request to an authorization server; and the authorization server verifies the decrypted authorization permission certificate, and then issues an access token to the password service middleware. According to the OAuth2.0-based WEB authentication method provided by the invention, the user password is combined with the smart password key to further solve the problem that the OAuth2.0 protocol single password verification security is weak, the process is more rigorous,and the security guarantee of the authorization authentication process is enhanced.

Description

technical field [0001] The invention relates to a WEB authentication method of password service middleware based on OAuth2.0. Background technique [0002] OAuth (Open authorization) is a network standard about open authorization, which is widely used all over the world. The current version is version 2.0. OAuth2.0 is now widely used in "third-party" authentication and authorization login, and it has attracted much attention as a standard protocol for open platform authentication and authorization systems. The OAuth2.0 protocol has higher security, fewer interactions, fundamentally simplifies the protocol process, and reduces the difficulty of development. [0003] When accessing resources across domains, webpage plug-ins for different browsers are different, involving permissions and certificate-related issues, exposing defects such as poor compatibility, and lack of security for authorized login authentication. Combining the OAuth2.0 protocol with the smart password key ...

AI Technical Summary

Problems solved by technology

[0003] When accessing resources across domains, webpage plug-ins for different browsers are different, involving permissions and certificate-related issues, exposing defects such as poor compatibility, and the security of authorized login authentication.

Images