Identity authentication method and identity authentication system

Abstract

The invention discloses an identity authentication method and an identity authentication system. A unified authentication protocol is adopted for communication between a server side of the system and a user terminal, and the user terminal is connected with an authenticator element. The authentication method comprises the following steps that after receiving an authentication request, a server side issues an authentication request message to a user terminal and waits for an authentication response message; after receiving an authentication response message generated by the user terminal, the server side performs message verification, performs digital signature verification of the digital certificate and issues an authentication result, wherein the authenticator element is a terminal authentication device capable of realizing identity feature acquisition, extraction, storage and matching. The system and the method are based on a digital certificate security application mechanism of a unified protocol, are compatible with a PKI system, provide unified authentication service for services, reduce integration deployment difficulty, are good in user experience and high in security, and also protect user privacy.

Description

technical field [0001] The invention relates to the technical field of user identity authentication, in particular to an identity authentication method and an identity authentication system with good compatibility. Background technique [0002] At present, the popular authentication solution in the industry is to manage keys through special hardware devices, provide different management tools and plug-ins for different operating systems and application software to complete the use of the application side, and send the digital signature results to the backend through the communication link. The terminal completes the digital signature verification. [0003] In the process of using digital certificates, it is necessary to design operating systems and basic application software (such as browsers, etc.). Due to the lack of unified protocol support, users need to install various management tools, plug-ins, etc. It is difficult to be compatible with multiple platforms, and users a...

AI Technical Summary

Problems solved by technology

[0003] In the process of using digital certificates, it is necessary to design operating systems and basic application software (such as browsers, etc.). Due to the lack of unified protocol support, users need to install various management tools, plug-ins, etc. It is difficult to be compatible with multiple platforms, and users are complicated to use. Poor; the security of digital certificates mainly focuses on key management security, but the security of front-end and back-end interaction processes lacks a security protection mechanism, and there are security risks such as replay attacks, phishing attacks, and man-in-the-middle attacks;

[0004] The PKI / CA mechanism was designed in the 1980s. It mainly provided solutions at the key management level and achieved unity. However, there was a lack of unified specifications at the application level, which led to a series of application security and compatibility issues, and also made Cryptography application is difficult to popularize and use

Images