A dynamic identity authentication method, device, system and electronic equipment

Abstract

This invention discloses a dynamic identity authentication method, apparatus, system, and electronic device, relating to the fields of network communication and information security technology. The invention aims to solve the technical problems of existing identity authentication schemes, such as the ease with which passwords and plaintext identity identifiers are leaked and stolen, and the computational burden and vulnerability to network replay attacks brought about by encrypted transmission. This invention provides a method applied to an authentication terminal device, comprising: receiving a request without plaintext identifier initiated by the authenticated terminal device; responding and sending a random string with time-limited characteristics; receiving a dynamic authentication code calculated and returned by the authenticated terminal device based on the random string and the real identity identifier using a built-in preset obfuscation algorithm; and performing an inverse operation on the authentication code using a corresponding preset parsing algorithm to extract the identity identifier and verifying it against a valid database. This invention has the significant advantages of eliminating the need to transmit the real identity identifier over the network, completely blocking replay attacks, and achieving extremely high computational efficiency, greatly improving system security.

Images