The embodiment of the invention provides an interface
authentication method and
system based on a
large model. According to the method, user key information including a user identity, a key pair, a salt value, failure time and key state information is newly established through a private
key management module and is stored in a
database, so that the user key information is conveniently managed; the
client side assembles the request parameter based on the to-be-processed service data, the
timestamp and the random number ID and generates the token by using the private
key signature, so that the security is further improved; when an interface is called, replay attacks can be prevented through
timestamp verification, repeated requests can be avoided through random number ID
verification, use of invalid or expired secret keys can be eradicated through secret key state and invalid time
verification, data can be verified not to be tampered in combination with signature verification, and all-around safety protection is formed through the multiple verification mechanisms. The whole process from
key generation, request construction to interface calling verification is controlled layer by layer, risks of illegal access, data tampering and leakage and the like can be effectively resisted, and the security of the interface can be improved.