A web authentication method based on oauth2.0 password service middleware

Abstract

The present invention provides a WEB authentication method based on OAuth2.0 cryptographic service middleware. First, the cryptographic service middleware applies to the authentication server for authorization authentication; the cryptographic service middleware performs DES on the user information and the smart cryptographic key PIN code submitted by the browser. Encrypted, and then sent to the authentication server; after receiving the request, the authentication server verifies the password service middleware information; the authentication server verifies the decrypted user information and PIN code, and after passing through, the server performs Subject login, encrypts the authorization certificate and returns it to the middleware ; After the middleware receives the authorization certificate, the middleware Subject logs in, and then requests to the authorization server; the authorization server verifies the decrypted authorization certificate, and issues an access token to the password service middleware after passing the verification. The invention combines the user password with the intelligent password key to further solve the problem of weak verification security of the single password of the OAuth2.0 protocol, the process is more rigorous, and the security guarantee of the authorization authentication process is strengthened.

Description

Technical field [0001] The present invention relates to a web authentication method based on OAUTH2.0 password service intermediate. Background technique [0002] OAuth (Open Authorization) is an open-authorized network standard that is widely used in the world. The current version is version 2.0. OAUTH2.0 is now widely used in the "Third Party" certification authorization login, which has received attention as the standard protocol of the open platform certification authorization system. OAuth 2.0 protocol is higher, less intersession, fundamentally simplifies the protocol process, and reduces development difficulty. [0003] In cross-domain access resources, different browser's web plug-ins, related issues related to programs, exposure to deficiency, authorize login authentication security, etc. The OAUTH 2.0 protocol is combined with the smart password key to enhance the security in the authorized login process, which reduces the risk of disclosure of server-side user informat...

AI Technical Summary

Problems solved by technology

[0003] When accessing resources across domains, webpage plug-ins for different browsers are different, involving permissions and certificate-related issues, exposing defects such as poor compatibility, and the security of authorized login authentication.

Images