Portable authentication system and method

Abstract

The invention relates to a portable authentication system and method. The system comprises a portable authentication device and a server. The portable authentication device comprises an authenticationinformation acquisition mechanism, a display module, a processing module, a first password module, a network module, a communication module and a battery module. The portable authentication device isconnected with a terminal to access a server through the network module, obtains network service through the terminal, and communicates with the server through the communication module. The method based on the system comprises the following steps: connecting the portable authentication device and the terminal; confirming the identity of the authentication device; inputting authentication information; sending to a server; authentication information matching; displaying the password; and verifying the password and accessing the MAC address of the terminal. The system has the advantages that triple authentication of the portable authentication device, the visitor and the terminal is carried out, so that the security is high. The password returned to the terminal by the server is encrypted bythe temporary secret key, so that secret file leakage caused by secret key leakage is avoided.

Description

technical field [0001] The invention relates to the authentication field, in particular to a portable authentication system. Background technique [0002] At present, people pay more and more attention to network security issues, among which advanced identity authentication technology is an effective means to ensure network security, and it is also the first important line of defense for network security. When users access the system, in order to protect some important confidential files, people often set passwords. This is the simplest and most traditional way. When they want to view files or access some important servers, they need to enter passwords for authentication. The system Responsible for verifying the correctness of the password and judging the legitimacy of the user. For this kind of password authentication, as long as anyone knows the specific password, anyone can access the file or server, and the security barrier is relatively weak. On the other hand, these ...

AI Technical Summary

Problems solved by technology

For this kind of password authentication, as long as anyone knows the specific password, anyone can access the file or server, and the security barrier is relatively weak.

On the other hand, these passwords are also easy to spread to the remote network platform, and any node on the network can implement monitoring, and the risk of passwords being stolen is high.

In addition, ordinary people tend to use a commonly used password with a relatively small length and number of digits, which also increases the hidden danger of password leakage

Therefore, although this password authentication method mainly implemented by mathematical means is simple to configure and easy to use, it has low security and has many defects.

Images