Dynamic code verification system, method and use

Abstract

The system thereof comprises: application system server, terminal of allocation system server and one-time password card. The one-time password card generates one-time password by inputting a random number, and then user sends said one-time password to the application system server that makes authentication for the one-time password and in term of the authentication result decides if the user is permitted to log-in. The invention can be used in many fields such as: gaming, finance, securities, business management and electronic commerce.

Description

technical field [0001] The invention relates to a dynamic password authentication system, an authentication method and its application, in particular to a mobile token-based dynamic password authentication system, an authentication method and its application. Background technique [0002] Identity authentication is an indispensable and crucial link to ensure the security and stable operation of the system. When a user accesses the application system, he or she needs to first verify whether the user's identity is consistent with the claimed one through some authentication mechanism. After the authentication is successful, it can be determined whether the user can access a certain resource of the system or not based on the user's identity and authorization database. Do something or access will be denied. [0003] At present, the commonly used identity authentication technologies mainly include fixed password comment and dynamic password authentication. [0004] The fixed pas...

AI Technical Summary

Problems solved by technology

However, the disadvantage of this authentication method is: since the customer's account number is a fixed plaintext (usually unencrypted Arabic numerals and letters), and the password is static, the customer will not modify it for a long time. More and more frequently, changes in the application environment and the development of high-tech criminal means, stealing these two items, there are more and more cases of counterfeiting legitimate authorized users to enter their accounts for malicious operations

However, this dynamic password authentication method also has its inevitable shortcomings. The customer must have a mobile terminal to receive the dynamic password, and it needs to use a wireless communication system, which has certain unreliability.

Images