The application discloses a kind of
mobile phone token management method based on iOS platform, belong to
information security authentication technical field, its method specifically includes:
mobile phone end reads the key after official website
encryption, and save to keychain, key decryption obtains a random code associated with user, according to
current time and step length, dynamic code is obtained using SHA1
algorithm, dynamic code 30 seconds update once, dynamic code comparison is consistent, and it is bound successfully;When user logs in again, in addition to inputting correct account
password, dynamic code also needs to be verified to enter into
system,
mobile phone end reads key again, compare the key previously saved in keychain, and reset to keychain according to the difference between the two, the key is saved in keychain in the application, and data will not be lost, will not be affected by network, APP exits restart or uninstallation and reinstallation, the data in keychain will not be lost, and can be used permanently, can well solve the problem that existing mobile phone SMS
verification code exists
attack, blast.