Method for protecting safety of account number cipher

Abstract

This invention relates to a method for protecting safety of codes of account numbers including the following steps: a user should submit the account number name and its cell phone number to a registration certification server system, which binds the name and the number, logs on the request, then the server certifies and sends it the verification code, the user logs on then the server certifies it.

Description

(1) Technical field [0001] The invention relates to the operation and application technology of the combination of short message transmission and computer database, in particular to a method for protecting the security of account passwords. (2) Background technology [0002] At present, there are three main methods for publicly known account password protection: [0003] The first is the static password authentication technology, which uses the user's "account name" and "password" to authenticate and identify the legitimacy of the user. Its main feature is to use a fixed password to activate a specific account, but due to the password and As a soft identification, the account number is static and unchanging, and there are many drawbacks and security loopholes in the network transmission. The cracking technology for it is constantly developing, and many tools and methods can be used to steal the account and password, such as stealing and deciphering. , Peeping, cheating, etc. In a...

AI Technical Summary

Problems solved by technology

Since the password changes dynamically with time, it is impossible for anyone without a password card to know the password. Therefore, this password technology is much safer than a static password. , small size, easy to carry, defects of this technology: high cost of use, easy to lose, easy to damage, low reliability, password generation depends entirely on time synchronization, if the time difference between the client and server is large, the password card will be It will be invalid and cause the user to be unable to log in to the system;

This is because the account information and key used for identity authentication are not directly readable, external applications can only send input factors used for calculation, and the entire calculation process is completely completed by the CPU in the ePass online game anti-theft lock. The calculation result is transmitted to the external application, so that the key is absolutely impossible to be intercepted by an external hacker program, and the calculation of the key is an irreversible algorithm, and the value of the key cannot be reversed through the calculation structure, and then passed to ePass The calculation results outside the online game anti-theft lock will also change with each input data. Even if the value to be calculated for each authentication is recorded, the purpose of fraudulent identity cannot be achieved. Its advantages and disadvantages are the same as those of the "dynamic password card".

Images