An identity-enhanced authentication and authentication method and device

Abstract

The invention discloses an identity-enhanced authentication and authentication method and device, and the method comprises the steps: deploying a security gateway at an access entrance of a target website, and obtaining an access request of the target website through encrypted communication; Utilizing the security gateway to carry out identity information and authority verification on a requesterapplying for access; Recording the access request behavior, and formatting and outputting a behavior rule; Legality judgment is conducted on the content requested to be accessed, an alarm is given toillegal content, and access is terminated. A security gateway is deployed at an access entrance of a target website; a security authentication certificate is deployed on the PC client; A mode of verifying a certificate and a certificate identity permission identifier by using a security website is adopted; Under the condition that an enterprise does not change a network structure and a service system code, the access authority of the employee client side identity to the target service system is controlled, the defects of authentication and other safety aspects of traditional login based on a user name / password mode are effectively overcome, and the enterprise information safety is effectively improved.

Description

technical field [0001] The invention relates to the technical field of enterprise information security, in particular to a method and device for identity strengthening authentication and authentication. Background technique [0002] Traditional business systems based on account and password login authentication have great security risks. Due to weak passwords set by individual employees, unintentional loss of passwords, and hacker attacks, the data of the target business system may face potential security risks. On the other hand, ordinary password-based login systems have no effective auditing methods, and employee behavior operations have great risks in the operation of such systems, and if business systems are directly exposed to the Internet, there is also a great risk of hacker attacks. Contents of the invention [0003] The purpose of the present invention is to provide a method and device for identity strengthening authentication and authentication to address the pr...

AI Technical Summary

Problems solved by technology

[0003] The purpose of the present invention is to provide a method and device for identity strengthening authentication and authentication to address the problem of potential information security risks in accessing enterprise business systems using the account and password login method in the prior art. By deploying a security gateway at the access entrance of the target website, The security authentication certificate is deployed on the PC client, and the security website verification certificate and certificate identity authority identification are adopted to realize the access authority control of the employee client identity to the target business system without changing the network structure and business system code of the enterprise , effectively make up for the lack of authentication and other security aspects of traditional login based on username / password, and effectively improve enterprise information security

Images