Method, system, medium and equipment for identity authentication through code scanning

Abstract

The invention provides a method for performing identity authentication through code scanning, the method is applied to a client which runs an application for providing service for an authenticated user based on identity authentication and has a display function, and the method comprises the following steps: generating an authentication identifier related to user identity authentication in response to a demand of the user for obtaining the application service; generating a two-dimensional code for performing identity authentication on the user according to the authentication identifier related to the user identity authentication and the IP address of the client where the application is located; displaying a two-dimensional code for performing identity authentication on the user to the user, and indicating the user to scan the two-dimensional code and perform authentication signature by using the signature private key; and verifying the authentication signature of the user to realize identity authentication of the user. By adopting the method for realizing the code scanning identity authentication, the server does not need to be transformed, the use difficulty of a code scanning mode is not improved, the use scene of the code scanning identity authentication is enlarged, the method can be compatible with a traditional identity authentication method, and the application range is greatly widened.

Description

technical field [0001] The present invention relates to the field of information security, specifically, to the technical field of identity authentication in information security, and more specifically, to a method, system, medium and equipment for identity authentication by scanning codes. Background technique [0002] For information security, identity authentication is required in many application service fields. In traditional identity authentication, a random number generated by the server for identity authentication is sent to the client, and the client uses its own signature private key to verify the random number. Sign and send the signature and user ID to the server for authentication. With the development of technology, for some specific scenarios, based on the consideration of ease of use and security, the way of scanning codes (mainly scanning QR codes) will be used for identity authentication. [0003] However, in the existing code-scanning identity authenticat...

AI Technical Summary

Problems solved by technology

[0003] However, in the existing code-scanning identity authentication scheme, the two-dimensional code is generated by adding URL (Uniform Resource Locator, Uniform Resource Locator) on the basis of random numbers, so that the server must increase the processing of the URL. For scenarios where traditional identity authentication exists, it will inevitably involve modification of the server side to be applicable to this type of code scanning authentication method, which inevitably increases investment costs and increases the difficulty of implementation, and is not compatible with traditional identity authentication schemes

Images