Identity authentication system adopting password firewall

Abstract

The invention relates to an identity authentication system adopting a password firewall. An initialization mechanism of the identity authentication system comprises the following steps: carrying out an initialization operation; establishing an account number and registering a password; applying a private key based on the password; calculating a public key based on the password; and extracting the private key based on the password. A user identity authentication mechanism comprises the following steps: sending out a request; generating an inquiry code; calculating a message; generating a digital signature; returning to the password firewall by a response code; calculating the public key of a user; reversely calculating the password of the user; and logging in a password authentication server by a user agent. The identity authentication system converts a password authentication mechanism of the physical / logical inner side of the firewall into an inquiry-response authentication mechanism of the physical / logical outer side of the firewall so as to overcome the weak point of password authentication and improve the safety of the authentication system. The inquiry-response authentication mechanism adopts the digital signature based on the password and provides the authentication service of the signature public key without depending on a public key infrastructure. The digital signature adopts a novel and quick algorithm with the speed hundreds of times higher than that of a conventional algorithm so as to be convenient for curing in a token.

Description

technical field [0001] The invention belongs to the technical field of information security, and more specifically relates to a challenge-response identity authentication system using a novel digital signature method. Background technique [0002] User identity authentication is the basis of computer system security. If the identity of system visitors cannot be reliably confirmed, other security measures will be useless. Although the traditional password authentication technology developed in the stand-alone era is relatively mature, and has the advantages of portability and high efficiency, its security strength is not high enough, and it is vulnerable to eavesdropping, replay, brute force and other attacks. After entering the network era, distributed computer application systems are increasingly developed, and the above authentication technologies can no longer meet their growing needs. [0003] Using conventional digital signature algorithm with challenge-response authen...

AI Technical Summary

Problems solved by technology

This situation not only increases the cost of computer application system construction and operation, but also brings inconvenience and confusion to users.

Images