CN104283691B - A kind of Bidirectional identity authentication method and system based on dynamic password - Google Patents
A kind of Bidirectional identity authentication method and system based on dynamic password Download PDFInfo
- Publication number
- CN104283691B CN104283691B CN201410609697.2A CN201410609697A CN104283691B CN 104283691 B CN104283691 B CN 104283691B CN 201410609697 A CN201410609697 A CN 201410609697A CN 104283691 B CN104283691 B CN 104283691B
- Authority
- CN
- China
- Prior art keywords
- dynamic password
- authentication
- verifying
- unit
- user identifier
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Expired - Fee Related
Links
- 238000000034 method Methods 0.000 title claims abstract description 32
- 230000002457 bidirectional effect Effects 0.000 title claims abstract description 15
- 238000012795 verification Methods 0.000 claims abstract description 32
- 108010001267 Protein Subunits Proteins 0.000 claims description 4
- 238000004590 computer program Methods 0.000 claims 1
- 235000013399 edible fruits Nutrition 0.000 description 3
- 238000012360 testing method Methods 0.000 description 3
- 230000005540 biological transmission Effects 0.000 description 1
- 238000013461 design Methods 0.000 description 1
- 238000011161 development Methods 0.000 description 1
- 238000010586 diagram Methods 0.000 description 1
- 238000012986 modification Methods 0.000 description 1
- 230000004048 modification Effects 0.000 description 1
- 239000007787 solid Substances 0.000 description 1
Landscapes
- Mobile Radio Communication Systems (AREA)
- Storage Device Security (AREA)
Abstract
The present invention provides a kind of Bidirectional identity authentication method and system based on dynamic password, this method include：Applying unit receives externally input user identifier and the first dynamic password, and user identifier, the first dynamic password and the pre-stored verification information for being used to verify applying unit are sent to authentication unit；Authentication unit receives user identifier, the first dynamic password and verification information, the first dynamic password is verified according to user identifier, after being verified, authentication is carried out to applying unit according to verification information, if the verification passes, then the second dynamic password is generated according to the user identifier, the second dynamic password is sent to applying unit, otherwise, the second dynamic password is not generated；Applying unit receives the second dynamic password, exports second dynamic password.The safety of application system is can be improved by this method and system.
Description
Technical field
The present invention relates to field of information security technology more particularly to a kind of Bidirectional identity authentication methods based on dynamic password
And system.
Background technique
Dynamic password is that a uncertain random digit combination is generated according to special algorithm, and each password can only make
With primary.Dynamic password is applied by more and more industries at present as one of safest identity identifying technology.By
Easy to use in it and unrelated with platform, with the development of mobile internet, dynamic-password technique has become identity identifying technology
Mainstream, be widely used in the fields such as enterprise, network game, finance.Mainstream has hardware order for generating dynamic password terminal at present
Board, short message password, handset token, four kinds of software token.
The existing identity authentication method based on dynamic password is unilateral authentication.User is by user identifier and dynamic mouth
The dynamic password for enabling terminal show is input to applying unit, and user identifier and dynamic password are sent to certification list by applying unit
Member, authentication unit authenticate user identity according to user identifier and dynamic password, and authentication result is fed back to user.
As can be seen from the above description, can only be authenticated in the prior art to the identity of user, cannot to applying unit into
Row certification, the safety of application system are lower.
Summary of the invention
The present invention provides a kind of Bidirectional identity authentication method and system based on dynamic password, can to applying unit into
Row authentication improves the safety of application system.
On the one hand, the present invention provides a kind of Bidirectional identity authentication methods based on dynamic password, including：
S1：Applying unit receives externally input user identifier and the first dynamic password；
S2：The applying unit by the user identifier, first dynamic password and it is pre-stored be used for verify answer
Authentication unit is sent to the verification information of unit；
S3：The authentication unit receives the user identifier, first dynamic password and the verification information；
S4：The authentication unit verifies first dynamic password according to the user identifier；
S5：After first verifying dynamic password passes through, the authentication unit is according to the verification information to the application
Unit carries out authentication, and if the verification passes, then the authentication unit generates the second dynamic password according to the user identifier,
Second dynamic password is sent to the applying unit, successively executes S6, S7, otherwise, the authentication unit does not generate the
Two dynamic passwords；
S6：The applying unit receives second dynamic password；
S7：The applying unit exports second dynamic password.
Further, the S4 includes：
S41：The authentication unit is according to the user identifier and pre-set user identifier and the first verifying dynamic mouth
The corresponding relationship of the seed of order determines the seed of the first verifying dynamic password；
S42：It seed, the time that the authentication unit verifies dynamic password according to described first, is generated by hash algorithm
First verifying dynamic password；
S43：The authentication unit judges whether the first verifying dynamic password and first dynamic password are identical, such as
Fruit is then to be verified, and executes step S5, and otherwise, authentication failed, the authentication unit sends authentication failed information and answers to described
With unit, so that the applying unit exports the authentication failed message.
Further, the authentication unit generates the second dynamic password according to the user identifier, including：
S51：The authentication unit is according to the user identifier and pre-set user identifier and the second dynamic password
The corresponding relationship of seed determines the second seed of second dynamic password；
S52：The authentication unit generates the second dynamic mouth according to the second seed, time, by hash algorithm
It enables.
Further, the S7 includes：
The applying unit exports second dynamic password, so that external the second verifying according in dynamic password terminal
Dynamic password verifies second dynamic password, wherein first dynamic password and the second verifying dynamic password are equal
In the dynamic password terminal.
Further, the S5 further includes：If the verification passes, then the authentication unit is sent to additional information is verified
The applying unit, so that the applying unit exports the verifying additional information, wherein the verifying additional information, including：
The identification information of the applying unit.
On the other hand, the bidirectional identity authentication system based on dynamic password that the present invention provides a kind of, including：Using list
Member, authentication unit；
The applying unit, for receiving externally input user identifier and the first dynamic password, by the user identifier,
First dynamic password and the pre-stored verification information for verifying applying unit are sent to the authentication unit, receive
The second dynamic password that the authentication unit is sent exports second dynamic password；
The authentication unit, for receiving the user identifier, first dynamic password and the verification information, according to
The user identifier verifies first dynamic password, after first verifying dynamic password passes through, is tested according to described
It demonstrate,proves information and authentication, if passed through to the authentication of the applying unit, the certification is carried out to the applying unit
Unit generates the second dynamic password according to the user identifier, and second dynamic password is sent to the applying unit, no
Then, the authentication unit does not generate the second dynamic password.
Further, the authentication unit includes：
First determines subelement, for according to the user identifier and pre-set user identifier and the first verifying dynamic
The corresponding relationship of the seed of password determines the seed of the first verifying dynamic password；
First generates subelement, raw by hash algorithm for the seed according to the first verifying dynamic password, time
At the first verifying dynamic password；
Judgment sub-unit, for judging whether the first verifying dynamic password and first dynamic password are identical, such as
Fruit is that then decision verification passes through, and authentication is carried out to the applying unit according to the verification information, otherwise, it is determined that verifying
Failure sends authentication failed information to the applying unit, so that the applying unit exports the authentication failed message.
Further, the authentication unit, including：
Second determines subelement, for according to the user identifier and pre-set user identifier and the second dynamic password
The corresponding relationship of seed determine the second seed of second dynamic password；
Second generates subelement, for generating second dynamic by hash algorithm according to the second seed, time
Password.
Further, the applying unit is specifically used for exporting second dynamic password, so that outside is according to dynamic mouth
Enable in terminal second verify dynamic password second dynamic password is verified, wherein first dynamic password and
Second verifying dynamic password is in the dynamic password terminal.
Further, the authentication unit will verifying if being also used to pass through the authentication of the applying unit
Additional information is sent to the applying unit, so that the applying unit exports the verifying additional information, wherein the verifying
Additional information, including：The identification information of the applying unit.
A kind of Bidirectional identity authentication method and system based on dynamic password provided through the invention, in authentication unit pair
After the authentication of applying unit passes through, the second dynamic password can be generated, and the second dynamic password of generation is exported to use
Family allows users to verify applying unit, improves the safety of application system.
Detailed description of the invention
In order to more clearly explain the embodiment of the invention or the technical proposal in the existing technology, to embodiment or will show below
There is attached drawing needed in technical description to be briefly described, it should be apparent that, the accompanying drawings in the following description is the present invention
Some embodiments for those of ordinary skill in the art without creative efforts, can also basis
These attached drawings obtain other attached drawings.
Fig. 1 is a kind of Bidirectional identity authentication method flow chart based on dynamic password provided in an embodiment of the present invention；
Fig. 2 is a kind of bidirectional identity authentication system structure diagram based on dynamic password provided in an embodiment of the present invention.
Specific embodiment
In order to make the object, technical scheme and advantages of the embodiment of the invention clearer, below in conjunction with the embodiment of the present invention
In attached drawing, technical scheme in the embodiment of the invention is clearly and completely described, it is clear that described embodiment is
A part of the embodiment of the present invention, instead of all the embodiments, based on the embodiments of the present invention, those of ordinary skill in the art
Every other embodiment obtained without making creative work, shall fall within the protection scope of the present invention.
The embodiment of the invention provides a kind of Bidirectional identity authentication methods based on dynamic password, referring to Fig. 1, this method packet
It includes：
Step 101：Applying unit receives externally input user identifier and the first dynamic password；
Step 102：The applying unit is by the user identifier, first dynamic password and pre-stored is used to test
The verification information of card applying unit is sent to authentication unit；
Step 103：The authentication unit receives the user identifier, first dynamic password and the verification information；
Step 104：The authentication unit verifies first dynamic password according to the user identifier；
Step 105：After first verifying dynamic password passes through, the authentication unit is according to the verification information to described
Applying unit carries out authentication, if the verification passes, then successively executes step 106,107,108,109, if verifying is not led to
It crosses, thens follow the steps 110；
Step 106：The authentication unit generates the second dynamic password according to the user identifier；
Step 107：Second dynamic password is sent to the applying unit by the authentication unit；
Step 108：The applying unit receives second dynamic password；
Step 109：The applying unit exports second dynamic password；
Step 110：The authentication unit does not generate the second dynamic password.
The method provided through the foregoing embodiment, after authentication unit passes through the authentication of applying unit, Ke Yisheng
It exports at the second dynamic password, and by the second dynamic password of generation to user, allows users to verify applying unit,
Improve the safety of application system.
Applying unit in the present embodiment can be website, application software, application server etc., the certification in the present embodiment
Unit can be certificate server, certification software, authentication module etc..
In step 109, applying unit can be shown the second dynamic password, can also be defeated by voice signal
Out.After user knows second dynamic password, in oneself dynamic password terminal for verifying testing for the second dynamic password
Card dynamic password is compared, if identical, proves that applying unit has passed through the verifying of authentication unit, applying unit is safety
, the Dangerous Internets such as fishing website avoided.Wherein, first dynamic password and for verifying testing for the second dynamic password
Dynamic password is demonstrate,proved in the same dynamic password terminal.The dynamic password terminal of user can be hardware state, APP
(Application, application software) form etc..
In above embodiment, the message being verified to applying unit is informed by dynamic password and is used by authentication unit
Family avoids unverified applying unit and exports false verifying message to user.For example, if authentication unit passes through
One text message informs that user's checking passes through, then unverified applying unit can easily forge a text
Message informs that user's checking passes through；If informing user using dynamic password, unverified applying unit is difficult to
It forges, improves the safety of application system.
In one possible implementation, the step 104 include the steps that being not shown in the figure 1041, step 1042,
Step 1043：
Step 1041：The authentication unit is dynamic according to the user identifier and pre-set user identifier and the first verifying
The corresponding relationship of the seed of state password determines the seed of the first verifying dynamic password；
Step 1042：Seed, the time that the authentication unit verifies dynamic password according to described first, pass through hash algorithm
Generate the first verifying dynamic password；
Step 1043：The authentication unit judge the first verifying dynamic password and first dynamic password whether phase
Together, if it is, being verified, execute step 105, otherwise, authentication failed, the authentication unit send authentication failed information to
The applying unit, so that the applying unit exports the authentication failed message.
In step 106, the authentication unit generates the second dynamic password according to the user identifier, including does not show in figure
Step 1061 out, step 1062：
Step 1061：The authentication unit is according to the user identifier and pre-set user identifier and the second dynamic mouth
The corresponding relationship of the seed of order determines the second seed of second dynamic password；
Step 1062：The authentication unit generates described second by hash algorithm and moves according to the second seed, time
State password.
The S7 includes：
The applying unit exports second dynamic password, so that external the second verifying according in dynamic password terminal
Dynamic password verifies second dynamic password, wherein first dynamic password and the second verifying dynamic password are equal
In the dynamic password terminal.
For example, external the second verifying dynamic password according in dynamic password terminal to second dynamic password into
Row verifying, specifically includes：Obtain the second verifying dynamic in the second dynamic password and dynamic password terminal of application terminal output
Password；Second dynamic password and the second verifying dynamic password are compared, if the same by verifying, otherwise verifying is lost
It loses.
In addition, the step 105 further includes：If the verification passes, then the authentication unit will verify additional information transmission
To the applying unit, so that the applying unit exports the verifying additional information, wherein the verifying additional information, packet
It includes：The identification information of the applying unit.
Wherein, the identification information of applying unit includes：DNS (Domain Name System, the domain name of applying unit
System) address, IP (Internet Protocol, network protocol) address, MAC (Media Access Control, medium visit
Ask control) address etc..Second dynamic password can be the combination of number, letter, symbol or digital alphabet symbol, return
Second dynamic password and verifying additional information can be the representations such as text, image, two dimensional code.
The verifying additional information can also include authentication URL (uniform resource locator, a Uniform
Resource Locator), which is directed toward authentication unit, and user clicks the authentication URL, and user can be in authentication unit
It checks the identification information of applying unit, and can check the number etc. that the verifying is clicked.
The bidirectional identity authentication system based on dynamic password that Fig. 2 shows a kind of, the system include：Applying unit 201 is recognized
Demonstrate,prove unit 202；
The applying unit 201 marks the user for receiving externally input user identifier and the first dynamic password
Knowledge, first dynamic password and the pre-stored verification information for verifying applying unit are sent to the authentication unit,
The second dynamic password that the authentication unit is sent is received, second dynamic password is exported；
The authentication unit 202, for receiving the user identifier, first dynamic password and the verification information,
First dynamic password is verified according to the user identifier, after first verifying dynamic password passes through, according to institute
It states verification information and authentication is carried out to the applying unit, it is described if passed through to the authentication of the applying unit
Authentication unit generates the second dynamic password according to the user identifier, and it is single that second dynamic password is sent to the application
Member, otherwise, the authentication unit do not generate the second dynamic password.
In one possible implementation, the authentication unit includes not shown in the figure：
First determines subelement, for according to the user identifier and pre-set user identifier and the first verifying dynamic
The corresponding relationship of the seed of password determines the seed of the first verifying dynamic password；
First generates subelement, raw by hash algorithm for the seed according to the first verifying dynamic password, time
At the first verifying dynamic password；
Judgment sub-unit, for judging whether the first verifying dynamic password and first dynamic password are identical, such as
Fruit is that then decision verification passes through, and authentication is carried out to the applying unit according to the verification information, otherwise, it is determined that verifying
Failure sends authentication failed information to the applying unit, so that the applying unit exports the authentication failed message.
In alternatively possible implementation, the authentication unit, including it is not shown in the figure：
Second determines subelement, for according to the user identifier and pre-set user identifier and the second dynamic password
The corresponding relationship of seed determine the second seed of second dynamic password；
Second generates subelement, for generating second dynamic by hash algorithm according to the second seed, time
Password.
Wherein, described second generate subelement and be specifically used for according to the second seed, generated by hash algorithm described in
Second dynamic password.
The applying unit is specifically used for exporting second dynamic password, so that outside is according in dynamic password terminal
Second verifying dynamic password verifies second dynamic password, wherein first dynamic password and the second verifying are dynamic
State password is in the dynamic password terminal.
In addition, the authentication unit, additional by verifying if being also used to pass through the authentication of the applying unit
Information is sent to the applying unit, so that the applying unit exports the verifying additional information, wherein the verifying is additional
Information, including：The identification information of the applying unit.
The contents such as the information exchange between each unit, sub-unit, implementation procedure in above equipment, due to side of the present invention
Method embodiment is based on same design, and for details, please refer to the description in the embodiment of the method for the present invention, and details are not described herein again.
It should be noted that, in this document, such as first and second etc relational terms are used merely to an entity
Or operation is distinguished with another entity or operation, is existed without necessarily requiring or implying between these entities or operation
Any actual relationship or order.Moreover, the terms "include", "comprise" or its any other variant be intended to it is non-
It is exclusive to include, so that the process, method, article or equipment for including a series of elements not only includes those elements,
It but also including other elements that are not explicitly listed, or further include solid by this process, method, article or equipment
Some elements.In the absence of more restrictions, the element limited by sentence "including a ...", it is not excluded that including
There is also other identical factors in the process, method, article or equipment of the element.
Those of ordinary skill in the art will appreciate that：Realize that all or part of the steps of above method embodiment can pass through
The relevant hardware of program instruction is completed, and program above-mentioned can store in computer-readable storage medium, the program
When being executed, step including the steps of the foregoing method embodiments is executed；And storage medium above-mentioned includes：ROM, RAM, magnetic disk or light
In the various media that can store program code such as disk.
Finally, it should be noted that：The foregoing is merely presently preferred embodiments of the present invention, is merely to illustrate skill of the invention
Art scheme, is not intended to limit the scope of the present invention.Any modification for being made all within the spirits and principles of the present invention,
Equivalent replacement, improvement etc., are included within the scope of protection of the present invention.
Claims (9)
1. a kind of Bidirectional identity authentication method based on dynamic password, which is characterized in that including：
S1：Applying unit receives externally input user identifier and the first dynamic password；
S2：The applying unit is by the user identifier, first dynamic password and pre-stored is used to verify using single
The verification information of member is sent to authentication unit；
S3：The authentication unit receives the user identifier, first dynamic password and the verification information；
S4：The authentication unit verifies first dynamic password according to the user identifier；
S5：After first verifying dynamic password passes through, the authentication unit is according to the verification information to the applying unit
Authentication is carried out, if the verification passes, then the authentication unit generates the second dynamic password according to the user identifier, by institute
It states the second dynamic password and is sent to the applying unit, successively execute S6, S7, otherwise, it is dynamic that the authentication unit does not generate second
State password；
S6：The applying unit receives second dynamic password；
S7：The applying unit exports second dynamic password, so that external the second verifying according in dynamic password terminal
Dynamic password verifies second dynamic password, wherein first dynamic password and the second verifying dynamic password are equal
In the dynamic password terminal.
2. the method according to claim 1, wherein the S4 includes：
S41：The authentication unit is according to the user identifier and pre-set user identifier and the first verifying dynamic password
The corresponding relationship of seed determines the seed of the first verifying dynamic password；
S42：Seed, the time that the authentication unit verifies dynamic password according to described first pass through hash algorithm and generate first
Verify dynamic password；
S43：The authentication unit judges whether the first verifying dynamic password and first dynamic password are identical, if
It is then to be verified, executes step S5, otherwise, authentication failed, the authentication unit sends authentication failed information to the application
Unit, so that the applying unit exports the authentication failed message.
3. the method according to claim 1, wherein the authentication unit generates second according to the user identifier
Dynamic password, including：
S51：The authentication unit is according to the seed of the user identifier and pre-set user identifier and the second dynamic password
Corresponding relationship determine the second seed of second dynamic password；
S52：The authentication unit generates second dynamic password according to the second seed, time, by hash algorithm.
4. the method according to claim 1, wherein the S5 further includes：If the verification passes, then the certification
Unit is sent to the applying unit for additional information is verified, so that the applying unit exports the verifying additional information,
In, the verifying additional information, including：The identification information of the applying unit.
5. a kind of bidirectional identity authentication system based on dynamic password, which is characterized in that including：Applying unit, authentication unit；
The applying unit, for receiving externally input user identifier and the first dynamic password, by the user identifier, described
First dynamic password and the pre-stored verification information for verifying applying unit are sent to the authentication unit, described in reception
The second dynamic password that authentication unit is sent exports second dynamic password；
The authentication unit, for receiving the user identifier, first dynamic password and the verification information, according to described
User identifier verifies first dynamic password, after first verifying dynamic password passes through, is believed according to the verifying
Breath carries out authentication, if passed through to the authentication of the applying unit, the authentication unit to the applying unit
The second dynamic password is generated according to the user identifier, second dynamic password is sent to the applying unit, so that outside
Second dynamic password is verified according to the second verifying dynamic password in dynamic password terminal in portion, wherein described the
One dynamic password and the second verifying dynamic password are in the dynamic password terminal, and otherwise, the authentication unit does not generate the
Two dynamic passwords.
6. system according to claim 5, which is characterized in that the authentication unit includes：
First determines subelement, for according to the user identifier and pre-set user identifier and the first verifying dynamic password
Seed corresponding relationship determine it is described first verifying dynamic password seed；
First generates subelement, for according to the first verifying seed of dynamic password, time, generates the by hash algorithm
One verifying dynamic password；
Judgment sub-unit, for judging whether the first verifying dynamic password and first dynamic password are identical, if so,
Then decision verification passes through, and carries out authentication to the applying unit according to the verification information, otherwise, it is determined that authentication failed,
Authentication failed information is sent to the applying unit, so that the applying unit exports the authentication failed message.
7. system according to claim 5, which is characterized in that the authentication unit, including：
Second determines subelement, for the kind according to the user identifier and pre-set user identifier and the second dynamic password
The corresponding relationship of son determines the second seed of second dynamic password；
Second generates subelement, for generating the second dynamic mouth by hash algorithm according to the second seed, time
It enables.
8. system according to claim 5, which is characterized in that the authentication unit, if be also used to single to the application
The authentication of member passes through, then verifying additional information is sent to the applying unit, so that described in applying unit output
Verify additional information, wherein the verifying additional information, including：The identification information of the applying unit.
9. a kind of storage medium, which is characterized in that the storage medium is stored with computer program, wherein transported in described program
Equipment perform claim where controlling the storage medium when row require 1 to described in any one of claim 4 based on dynamic
The Bidirectional identity authentication method of password.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201410609697.2A CN104283691B (en) | 2014-11-03 | 2014-11-03 | A kind of Bidirectional identity authentication method and system based on dynamic password |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201410609697.2A CN104283691B (en) | 2014-11-03 | 2014-11-03 | A kind of Bidirectional identity authentication method and system based on dynamic password |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN104283691A CN104283691A (en) | 2015-01-14 |
| CN104283691B true CN104283691B (en) | 2018-11-27 |
Family
ID=52258203
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201410609697.2A Expired - Fee Related CN104283691B (en) | 2014-11-03 | 2014-11-03 | A kind of Bidirectional identity authentication method and system based on dynamic password |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN104283691B (en) |
Families Citing this family (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN108234409B (en) * | 2016-12-15 | 2020-11-27 | 腾讯科技（深圳）有限公司 | Identity verification method and device |
| CN109743159A (en) * | 2018-01-09 | 2019-05-10 | 詹贯峰 | A kind of inter-authentication method for realizing authentication with authorization using bidirectional dynamic password |
Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101453458A (en) * | 2007-12-06 | 2009-06-10 | 北京唐桓科技发展有限公司 | Personal identification process for dynamic cipher password bidirectional authentication based on multiple variables |
| CN101699820A (en) * | 2009-10-30 | 2010-04-28 | 北京飞天诚信科技有限公司 | Method and device for authenticating dynamic passwords |
| CN102170437A (en) * | 2011-04-19 | 2011-08-31 | 上海众人网络安全技术有限公司 | System and method for realizing Phishing identification based on challenge password token |
| CN102685093A (en) * | 2011-12-08 | 2012-09-19 | 陈易 | Mobile-terminal-based identity authentication system and method |
Family Cites Families (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20070162961A1 (en) * | 2005-02-25 | 2007-07-12 | Kelvin Tarrance | Identification authentication methods and systems |
| WO2009082717A2 (en) * | 2007-11-19 | 2009-07-02 | Ezmcom, Inc. | A method for authenticating a communication channel between a client and a server |
-
2014
- 2014-11-03 CN CN201410609697.2A patent/CN104283691B/en not_active Expired - Fee Related
Patent Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101453458A (en) * | 2007-12-06 | 2009-06-10 | 北京唐桓科技发展有限公司 | Personal identification process for dynamic cipher password bidirectional authentication based on multiple variables |
| CN101699820A (en) * | 2009-10-30 | 2010-04-28 | 北京飞天诚信科技有限公司 | Method and device for authenticating dynamic passwords |
| CN102170437A (en) * | 2011-04-19 | 2011-08-31 | 上海众人网络安全技术有限公司 | System and method for realizing Phishing identification based on challenge password token |
| CN102685093A (en) * | 2011-12-08 | 2012-09-19 | 陈易 | Mobile-terminal-based identity authentication system and method |
Also Published As
| Publication number | Publication date |
|---|---|
| CN104283691A (en) | 2015-01-14 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN105007280B (en) | A kind of application login method and device | |
| US9246897B2 (en) | Method and system of login authentication | |
| Ellison | Ceremony design and analysis | |
| CN108011863B (en) | Method and device for identifying brute force cracking | |
| CN105099707B (en) | A kind of offline authentication method, server and system | |
| US9756056B2 (en) | Apparatus and method for authenticating a user via multiple user devices | |
| CN104580264B (en) | Login method, entering device and login and Accreditation System | |
| CN104917766B (en) | A kind of two-dimension code safe authentication method | |
| CN105847245B (en) | Electronic mailbox login authentication method and device | |
| KR20180079423A (en) | Dynamic update of CAPTCHA Challenge | |
| CN102946384B (en) | User authentication method and equipment | |
| CN105574398B (en) | A kind of verification code verification method and device | |
| CN105516195A (en) | Security authentication system and security authentication method based on application platform login | |
| Ferry et al. | Security evaluation of the OAuth 2.0 framework | |
| CN105490997B (en) | Safe checking method, device, terminal and server | |
| CN106790238A (en) | It is a kind of to forge CSRF defence authentication method and device across station request | |
| US20150244695A1 (en) | Network authentication method for secure user identity verification | |
| EP3180890A1 (en) | System and methods for user authentication across multiple domains | |
| US20180294978A1 (en) | Systems and methods for identifying certificates | |
| CN102904893B (en) | Checking device and verification method | |
| CN106330838A (en) | Dynamic signature method, client using the same and server | |
| CN105162604A (en) | Feature image identification based verification method and system, and verification server | |
| CN106453321A (en) | Authentication server, system and method, and to-be-authenticated terminal | |
| CN105743854A (en) | Security authentication system and method | |
| CN107948186A (en) | A kind of safety certifying method and device |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| TA01 | Transfer of patent application right |
Effective date of registration: 20170913 Address after: 100088 Beijing city Xicheng District xinjiekouwai Street 28, block D room 112 (Desheng Park) Applicant after: BEIJING QIHOO TECHNOLOGY Co.,Ltd. Address before: 100090, 8 floor, No. 18 Zhongguancun Avenue, Beijing, Haidian District, 04-1668 Applicant before: CLOUDSEC CENTURY CO.,LTD. |
|
| TA01 | Transfer of patent application right | ||
| TA01 | Transfer of patent application right |
Effective date of registration: 20180928 Address after: 518000 29/30, shop G, C G, science and Technology Park, 15 Keyuan Road, central science and Technology Park, Shenzhen, Guangdong Applicant after: Shenzhen Qifutong Technology Co.,Ltd. Address before: 100088 room 112, block D, 28 new street, new street, Xicheng District, Beijing (Desheng Park) Applicant before: BEIJING QIHOO TECHNOLOGY Co.,Ltd. |
|
| TA01 | Transfer of patent application right | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant | ||
| CF01 | Termination of patent right due to non-payment of annual fee |
Granted publication date: 20181127 |