System and method of preventing network account from stolen

Abstract

This invention provides one network id number anti-theft system and its method, which comprises the following steps: a, connecting one only sequence number outside anti-theft device to customer end; b, outside anti-theft device id number correction information to generate servo requirement id number correction message content through dynamic coding and public key; c, outside anti-theft device sending correction message codes and id codes through customer end on internet; d, application servo de-coding correction message through public formula to audit the message; e, testing whether the messages are correct.

Description

Technical field [0001] The invention belongs to the field of computer and network information security, and relates to a network identity authentication system and a method thereof, and specifically, to a network account anti-theft system and a method thereof. Background technique [0002] At present, the existing identity authentication products include: USB Key, USB token, RSA SecurID identity authentication token and Smart Cards and USB Authenticators, SafeNet's iKey series, Smart Key, Datakey, Gemplus smart card, Feitian Credit Epass identity authentication lock, etc. The most commonly used are the RSA SecurID authentication token and SafeNet's iKey series. [0003] Among them, the RSA SecurID identity authentication token uses a dynamic password system, which is composed of a password token on the user side and an authentication server on the application system side. The authentication server is the core part of the entire system. It is connected to the application system se...

AI Technical Summary

Problems solved by technology

[0005] 2. And every time the user logs in, he needs to enter a long series of irregular random numbers through the keyboard. Once he enters a wrong number, he must re-operate

Moreover, it is especially easy to be refused to log in due to clock misalignment or network delay when operating near the time point of dynamic password change, which is very inconvenient to use

[0006] 3. Since the password continues to be valid within a certain time window after the user logs in, there is a risk that hackers will use Trojan horse software and other means to track and record and use the password to log in within the time window

[0015] ◆For iKey, only one layer of hash algorithm encryption is done, no dynamic encryption is used

Images