System and method of preventing network account from stolen

Abstract

This invention provides one network id number anti-theft system and its method, which comprises the following steps: a, connecting one only sequence number outside anti-theft device to customer end; b, outside anti-theft device id number correction information to generate servo requirement id number correction message content through dynamic coding and public key; c, outside anti-theft device sending correction message codes and id codes through customer end on internet; d, application servo de-coding correction message through public formula to audit the message; e, testing whether the messages are correct.

Description

technical field [0001] The invention belongs to the field of computer and network information security, and relates to a network identity authentication system and its method, in particular to a network account anti-theft system and its method. Background technique [0002] At present, the existing identity authentication products include: USB Key, USB token, RSA SecurID identity authentication token and Smart Cards and USB Authenticators, SafeNet's iKey series, Smart Key, Datakey, Gemplus smart card, Feitian Chengxin's Epass identity authentication lock, etc. Among the most commonly used are RSA SecurID authentication tokens and SafeNet's iKey series. [0003] Among them, the RSA SecurID identity authentication token adopts a dynamic password system, which is composed of a password token at the user end and an authentication server at the application system end. The authentication server is the core part of the whole system, which is connected with the application system s...

AI Technical Summary

Problems solved by technology

[0005] 2. And every time the user logs in, he needs to enter a long series of irregular random numbers through the keyboard. Once he enters a wrong number, he must re-operate

Moreover, it is especially easy to be refused to log in due to clock misalignment or network delay when operating near the time point of dynamic password change, which is very inconvenient to use

[0006] 3. Since the password continues to be valid within a certain time window after the user logs in, there is a risk that hackers will use Trojan horse software and other means to track and record and use the password to log in within the time window

[0015] ◆For iKey, only one layer of hash algorithm encryption is done, no dynamic encryption is used

Images