User identity authentication method, device and equipment and storage medium

Abstract

The embodiment of the invention discloses a user identity authentication method, device and equipment and a storage medium, and the method comprises the steps: obtaining an input user name, and sending an authentication request to a server; receiving feedback information sent by the server side; reading locally stored authentication data associated with the user name; obtaining an input user password, calculating and generating a symmetric key according to the user name, the random number and the user password, and decrypting the ciphertext information through the symmetric key to obtain a signature private key; and calculating the user name, the hash value and the signature value of the feedback information through the signature private key, and sending the user name, the hash value and the signature value of the feedback information to the server. In the scheme, the eavesdropping attack, the replay attack and the dictionary attack of the user password can be effectively prevented, no extra hardware equipment is added, and the cost overhead is reduced.

Description

technical field [0001] The embodiments of the present application relate to the technical field of identity authentication, and in particular, to a user identity authentication method, device, device, and storage medium. Background technique [0002] Identity verification, also known as "verification" and "authentication", refers to the confirmation of the user's identity through certain means. At present, the main user identity authentication methods can be classified into three categories: user password authentication, user digital signature authentication, and user biometric (such as fingerprint, face, etc.) authentication. [0003] Among them, user password authentication is the most widely used login authentication method. The user first registers his user name and selected password on the server, and the server persistently stores the user name and password, and the password is often stored in an encrypted form. When the user performs password authentication to log i...

AI Technical Summary

Problems solved by technology

The user biometric authentication method has a high degree of user friendliness, and its security is between user password authentication and user digital signature authentication, but additional hardware sensors are required, and a secure channel needs to be established between the hardware sensor and the computing system. Template information storage must be secured, which increases costs

Images