A kind of identity authentication method, device and related equipment

Abstract

Embodiments of the present application provide an identity authentication method, apparatus, and related equipment, wherein the method includes: a server of a service provider receives a message that the user identity of a user has been authenticated by the server of the identity provider, and the message includes a verification method bound by the user information; the server of the service provider sends a verification request to the user terminal according to the verification method information; the server of the service provider receives the verification code sent by the user terminal, and verifies the verification code; the server of the service provider verifies the verification code If the verification is passed, the server of the service provider generates the access credential corresponding to the user, and sends the access credential to the user terminal, where the access credential indicates that the user has the right to access the server of the service provider. By implementing the above method, in the process of realizing federal identity authentication, the identity of the user is confirmed through multi-factor authentication, so as to prevent the risk of user data security from leakage of identity credentials of a single system.

Description

technical field [0001] The present application relates to the field of computer technology, and in particular, to an identity authentication method, apparatus and related equipment. Background technique [0002] With the development of network technology, users often need to use services provided by different service providers (service providers, SPs), but each SP generally has its own independent identity authentication system. When users need to use services provided by different SPs , you need to pass the authentication of each SP's identity authentication system to use the service. [0003] Currently, the identity authentication systems of different SPs can be federated, and the authentication in a single identity authentication system can be realized through the single sign on (SSO) technology. Serve. However, when multiple identity authentication systems implement federation, only a single authentication credential is needed to pass the authentication. If a single au...

AI Technical Summary

Problems solved by technology

However, when multiple identity authentication systems are federated, they only need to use a single authentication credential to pass the verification. If a single authentication credential is leaked, an attacker can use the services of multiple SPs through the identity credential of a single system. User information security will be seriously threatened

Images