Long-distance password identifying method based on smart card, smart card, server and system

Abstract

This invention provides a remote authentication method based on an intelligent card password, the intelligent card applying said method, a server and a system and a method for changing passwords and a system, in which, the password remote authentication method includes: the server utilizes a first Has function value inputting a system cryptographic key and a second Has inverse function value with the user password as the input to generate ciphered user information to be stored in an intelligent card, when a remote server is logged on, the intelligent card uses the second Has function value with the user password as the input to act on the ciphered user information in the same mode to the inverse function of the second Has function to get the second ciphered user information, computes the third Has function value with the second ciphered user information as the input to send the log-on request information containing the third Has function value to the server, which verifies the third Has function value so as to authenticate passwords.

Description

technical field [0001] The invention relates to remote authentication, in particular to a smart card-based password remote authentication method and system, and a password changing method and system. Background technique [0002] With the rapid development of computer networks, users can easily use the network to access resources in remote systems, such as home office needs to access company files, or registered users access online resources and so on. While users enjoy convenience and speed, the safety and efficiency of remote access become the key to the design of the entire system. [0003] Authentication is to prevent counterfeiting and unauthorized network access, thereby protecting information in remote systems from being obtained illegally. In computer network system, password authentication is one of the most popular verification methods used to solve the system's confidentiality and security problems. However, the traditional way of relying solely on user name and...

AI Technical Summary

Problems solved by technology

For this kind of attack, the following resistance methods can often be used: 1) Delayed response: the server responds slowly to the request, which makes it impossible for the attacker to exhaust all passwords within a limited time

2) Account lock: When the password login fails for an account several times, the server locks the account, making the account temporarily unusable

In this way, even if the information in the smart card is obtained by the attacker, the attacker cannot obtain the user password through offline dictionary attack

Images