Method and device for user identity authentication

Abstract

The invention relates to an encryption and decryption technology and discloses a method for user identity authentication, which is used for improving safety of a digital signature procedure. The method comprises the following steps: redesigning the whole digital signature process, cancelling originally unreliable links for the user identity authentication at a client-side, and safely retruding the identity authentication process to a server side for accomplishment. The server side can effectively monitor the network environment and timely perceives network attack, thus the effective solutionsfor resisting the network attack can be rapidly adopted and the expansion of the network attack can be avoided, thereby improving the safety of an electronic service system and ensuring the service quality of the electronic service system. The invention also discloses a client-side and a server for the user identity authentication.

Description

technical field [0001] The invention relates to encryption and decryption technology, in particular to a method and device for user identity authentication. Background technique [0002] At present, digital signature technology has been used in various electronic service (eg, e-commerce, e-government, online office, etc.) systems. Digital signature technology is to encrypt the summary information with the sender's private key and transmit it to the receiver together with the original text. The recipient can only decrypt the encrypted summary information with the sent public key, and then use the HASH function to generate a summary information for the received original text, and compare it with the decrypted summary information. If they are the same, it means that the received information is complete and has not been modified during transmission, otherwise it means that the information has been modified, so the digital signature can verify the integrity of the information. ...

AI Technical Summary

Problems solved by technology

Then, if the USBKEY is attacked by the network and the PIN code is cracked during the verification process, the USBKEY will still consider the user of the PIN code to be a legitimate user, and then digitally sign the service data and send it to the server, and the server only recognizes the private key signature , Therefore, I didn’t know that the USBKEY was attacked by the network, and still processed the service data according to the normal process. Obviously, this would bring many security risks to the electronic service system.

Images