Identity verification method for BS application service binding hardware codes in offline state

Abstract

The invention belongs to the technical field of identity information verification, and discloses an identity verification method for BS application service binding hardware codes in an offline state.A server deployed by a B / S application is used for web applications in a non-internet environment and comprises a webpage and a database, and the database comprises user names, passwords and other relational database information; the Web front end is used for accessing a web application by a user; the local service installed at the user side is used for data interaction; and the encryption lock isused for writing 8k byte information and writing the user name, the password and the firmware information into the encryption lock in a fixed format in advance. By installing the developed service locally, the defect that a software encryption lock does not provide web api is overcome, the developed local service is the core of the whole idea of the invention, and the service runs on a user computer and plays a role in interacting with hardware information of a server and the user computer.

Description

technical field [0001] The invention belongs to the technical field of identity information verification, and in particular relates to an identity verification method for BS application service binding hardware codes in an offline state. Background technique [0002] At present, the prior art 1 adopts user name and password to authenticate the identity of the application system, which is the most common and relatively loose identity authentication method, and is used in various application systems developed based on the B / S architecture. The user logs in to the web page through the user name and password, and the web front end uploads the user name and password to the server, and compares it with the user name and password in the database. After the comparison is passed, the user can successfully log in to the system. [0003] Some of the two pairs of identity verification methods in the prior art use an encryption lock, namely usk key, as the identity verification of the ap...

AI Technical Summary

Problems solved by technology

[0005] To sum up, the problems existing in the prior art are: (1) In the prior art, users can log in at any terminal with the same user name and password, which cannot meet specific application requirements and specific environments, and restrict specific Computer or other terminal login system

The biggest disadvantage of this mode is that the normal operation of the app depends on the user's computer .NET environment. In addition, when the app is updated, it is necessary to upgrade and reinstall the new app on each computer terminal.

[0007] (3) Part of the app on the web side is developed using the B / S structure. Due to the limited read and write permissions of the browser itself, it is impossible to directly read the usb key information on the computer. Therefore, the web version of the online banking application needs to be developed based on the browser's ActiveX

It can be used by a specific user on a specific computer, and the verification is invalid in the following situations: ①Failure to log in with an incorrect user name or password; ②Fail to log in if you replace your own computer; ③Failure to log in without a USB key encryption lock connected to the computer; ④Use process Monitor the state of the encryption lock in the middle, and the system cannot continue to be used if it is not connected to the computer correctly

Images