Network identity authentication system and method

Abstract

The invention relates to an identity authentication system and an authentication method. The identity authentication system comprises an authentication center CA module, an authentication module, a client side and a USB Key module, wherein the authentication center CA module is responsible for the functions of application, examination and approval, issuing, updating and revocation of a certificate; the authentication module respectively carries out the generation of a digital envelope and the authentication of a digital certificate to the client side and a server side; the client side mainly realizes the management of the system and the clients; and the USB Key module mainly provides a medium for storing the digital certificate and a user private key to the user. The invention adopts a digital envelope technology, and can meet the high-confidentiality requirement of data transmission; an authentication token is used for sending a request to the authentication server by the client sidefor authentication and realizing the security of the authentication process; and the client side and the authentication server respectively carry out the generation of the digital envelope and the digital certificate, thus being capable of realizing the mutual authentication between the client side and the authentication server.

Description

technical field [0001] The present invention relates to a network identity authentication system and method, in particular to a network identity authentication system and an implementation method. Background technique [0002] The security guarantee of network data transmission on the Internet has been widely concerned and valued by domestic and foreign academic circles and industrial circles. After years of research and exploration, a complete set of network security solutions and technical specifications have been initially formed-Public Key Foundation Facilities (Public Key Infrastructure, PKI), PKI technology is the infrastructure for providing information security services established by applying public key theory and technology. It uses digital certificates as the medium, combines symmetric encryption and asymmetric encryption technology, and binds the user's public key and other identification information (such as name, E-mail, ID number, etc.) of the user together. ...

AI Technical Summary

Problems solved by technology

[0007] Through the security analysis of this login method, it is found that the disadvantages are very obvious, and there are many obvious security risks

[0008] First of all, in this way, the password is easily forgotten or stolen

It is understood that the user passwords stored in the database are very simple, many of which are simple numbers from 1 to 9. Many managers do not want to use longer and more irregular passwords, which is completely understandable, but passwords are easy to guess. This situation cannot be ignored

In addition, when the two parties communicate with each other, there is no identity authentication. If one party encounters computer hacker attacks, computer viruses, malicious program attacks, etc., the other party may not receive or delay receiving information, which will cause unnecessary Loss

[0009] Secondly, in some system designs, passwords are actually stored in plain text in the database, which poses a potential threat of information leakage or data exposure, and it is difficult to resist cross-site attacks and SQL script injection password attacks

[0010] Furthermore, the security vulnerabilities of the Windows system are constantly updated in the form of patches. For office workers, it is difficult to understand these complex technologies and update the operating system frequently.

Images