Dynamic cipher authentication system, method and its use

Abstract

Being transmitted based on Internet, authentication system of dynamic cipher includes application system server, terminals of application system server, card of dynamic cipher. Card of dynamic cipher generates random dynamic cipher. Through terminals of application system server, users send dynamic ciphers to the application system server. Carrying out authentication for the dynamic cipher, application system server determines whether the user is allowed to log on based on result of authentication. Through authentication mechanism in double factors, the invention authenticates userí»s ID. Features are: time varying dynamic cipher, not easy of guessing subsequent cipher since particular algorithm applied. The invention is applicable to multiple areas including game, finance, negotiable securities, business management and electronic commerce etc.

Description

technical field [0001] The invention relates to a dynamic password authentication system, an authentication method and its application, in particular to a mobile token-based dynamic password authentication system, an authentication method and its application. Background technique [0002] Identity authentication is an indispensable and crucial link to ensure the security and stable operation of the system. When a user accesses the application system, he or she needs to first verify whether the user's identity is consistent with the claimed one through some authentication mechanism. After the authentication is successful, it can be determined whether the user can access a certain resource of the system or not based on the user's identity and authorization database. Do something or access will be denied. [0003] At present, the commonly used identity authentication technologies mainly include fixed password comment and dynamic password authentication. [0004] The fixed pas...

AI Technical Summary

Problems solved by technology

However, the disadvantage of this authentication method is: since the customer's account number is a fixed plaintext (usually unencrypted Arabic numerals and letters), and the password is static, the customer will not modify it for a long time. More and more frequently, changes in the application environment and the development of high-tech criminal means, stealing these two items, there are more and more cases of counterfeiting legitimate authorized users to enter their accounts for malicious operations

However, this dynamic password authentication method also has its inevitable shortcomings. The customer must have a mobile terminal to receive the dynamic password, and it needs to use a wireless communication system, which has certain unreliability.

Images