Security authentication method and system, equipment and medium

Abstract

The invention provides a security authentication method and system, equipment and medium, and the method comprises the steps that: an application client of a target application receives an authentication request related to the target application, the application client signs original text data by calling a security interface of a security client because the authentication request comprises the original text data to be authenticated, and signature data is obtained; and the application server of the target application obtains the signature data and the original text data from the application client, and the application server verifies the signature data and the original text data by calling the security interface of the signature authentication service unit to generate a security authentication result, wherein the execution environment of the digital terminal comprises a rich execution environment and a trusted execution environment, an application client and an application server run in the rich execution environment, and a security client and a signature authentication service unit run in the trusted execution environment. According to the invention, the situation that a digital signature authentication mechanism cannot be operated due to network problems is avoided, and the real-time performance of data processing is guaranteed.

Description

Technical field [0001] Technical Field The present invention relates to a terminal, in particular, it relates to a secure authentication method, system, device and medium. Background technique [0002] With the development of digital terminals, data terminals credible security requirements received widespread attention, how to ensure that the data on the terminal is not tampered with, non-repudiation of data operations to ensure security of data transmission and to avoid defects in the operating system itself according to the security risks become a priority. [0003] Currently a more common pattern is to do a remote server signature verification to ensure safe and reliable terminal data and avoid security risks operating system, the basic principle is achieved through the deployment of the distal end having a secure server encryption and decryption functions, through a server provide security API interface to be signed original data on the server side digital signature, secret k...

AI Technical Summary

Problems solved by technology

However, when the network is unstable or in places where the network cannot cover, the device cannot operate this mechanism, resulting in either the function cannot be used, or the real-time performance of data processing will drop sharply

Images