A method and system for offline remote authorization authentication

Abstract

The present invention proposes an off-line remote authorization authentication method and system. The method includes: the authorized device communicates with the authorized device in advance, and obtains a secret key seed synchronously; the authorized device and the authorized device respectively use the same algorithm to The key seed is calculated and processed, and the same ordered random array is generated for pre-storage; when the authorized device cannot communicate with the authorized device and authorization authentication is required, the user of the authorized device requests authorization from the administrator through a third-party path; the administrator based on The user identity is checked from the authorized device to obtain a random number in an ordered random array; the administrator informs the user of the authorized device of the random number through a third-party path; the user obtains the random number and enters it into the authorized device; the authorized device According to the input random number, search and compare in the pre-stored ordered random array. If the random number is found, the authorization authentication is successful. The invention satisfies the requirement of authorization and authentication under offline conditions.

Description

technical field [0001] The invention relates to the technical field of authorization and authentication, in particular to an offline remote authorization and authentication method and system. Background technique [0002] At present, for application scenarios that require remote authorization, it is usually necessary to establish a real-time network communication link between the authorizer and the authorized party, so that the authorizer can authenticate the permission request data sent by the authorized party, and then realize the remote authorization of the authorized party to the authorized party. Certification. [0003] However, the above-mentioned remote authorization and authentication methods require real-time network communication between the authorizer and the authorized party. Once the authorized party is offline, the authorizing party will not be able to obtain the permission request data sent by the authorized party, and thus will not be able to remotely conduct...

AI Technical Summary

Problems solved by technology

[0003] However, the above-mentioned remote authorization and authentication methods require real-time network communication between the authorizing party and the authorized party. Once the authorized party is offline, the authorizing party will not be able to obtain the permission request data sent by the authorized party, and thus will not be able to perform remote authentication on the authorized party. Authentication

Images