Identity authentication method based on dynamic token, and decryption and encryption terminal

Abstract

The embodiment of the invention provides an identity authentication method based on a dynamic token and a decryption and encryption terminal. The method comprises the steps: carrying out the encryption operation of ID data according to a main secret key if the dynamic token comprising an encryption end one-time password and the ID data is received, and obtaining a decryption end personal secret key; performing encryption operation on the current timestamp of the decryption end according to the personal secret key of the decryption end to obtain a one-time password of the decryption end, and ifthe one-time password of the decryption end is consistent with the one-time password of the encryption end, passing identity authentication; wherein the encryption end one-time password is obtained after the encryption end personal secret key carries out encryption operation on the current timestamp of the encryption end, and the encryption end personal secret key is obtained after the decryptionterminal carries out encryption on the ID information according to the main secret key. The invention has the advantages that the secret keys used by users are different, the system safety is improved under the scene that the terminal safety cannot be guaranteed, bidirectional communication is not needed, the verification speed is increased, the one-time password is obtained according to the timestamp, and the replay attack can be effectively avoided.

Description

technical field [0001] The invention relates to the field of identity authentication, in particular to an identity authentication method based on a dynamic token, and a decryption and encryption terminal. Background technique [0002] Graphical tokens such as QR codes and barcodes have been widely used in the field of identity authentication. In particular, in access management systems such as access control systems, the application of graphic tokens has been quite popular. The current two-dimensional code token is mainly implemented through a static two-dimensional code. This method is difficult to prevent attacks such as voyeurism and screenshots, which affects the security of the entire access management system. [0003] At present, this problem can be avoided to a certain extent by means of graphical OTP tokens. According to various factors such as time and ordinal number and the key, a dynamic password is generated through an encryption algorithm operation, and displa...

AI Technical Summary

Problems solved by technology

[0004] However, in the current method, the master key used for each user is the same, and the dynamic password is encrypted. If the device used by a user is attacked and the key stored in it is leaked, the entire system will lose security.

Images