Device, system and method for realizing identity authentication

Abstract

The invention discloses a device, a system and a method for realizing identity authentication. On the basis of the conventional common identity authentication technology, user identity and user equipment used by a user are bound in a mode of increasing the measurement authentication of the user equipment or out-of-band identity authentication; or attack on the user identity on a network is blocked in a mode of combining the increase of the measurement authentication of the user equipment and the out-of-band identity authentication so as to improve identity authentication safety, guarantee the benefit of a legal user and solve the problems of man-in-the-middle attack, connection hijacking attack and the like. Furthermore, the identity authentication system provided by the invention can be compatible with various existing identity authentication systems, does not need to perform overlarge modification on the conventional authentication system during implementation, has the advantages of low investment cost and easy management and maintenance and can greatly improve the safety of the identity authentication system.

Description

[0001] This application is a divisional application of the application dated October 23, 2008, the application number is 200810224837.9, and the invention title is "A Device, System and Method for Realizing Identity Authentication". technical field [0002] The present invention relates to authentication technology, in particular to a device, system and method for realizing identity authentication. Background technique [0003] At present, with the rapid development of Internet technology, online transactions have penetrated into people's daily life and work. Among them, the applications of "online banking" and "e-commerce" are the most representative applications. For example, "Online Banking" is a brand-new bank customer service submission channel. Whether at home, in the office, or on the go, customers can handle various banking services including inquiries, transfers, and payment through the Internet, and manage themselves. asset. [0004] However, while the Internet te...

AI Technical Summary

Problems solved by technology

Since the data read from the IC card is static each time, it is easier for an attacker to intercept the user's identity verification information through memory scanning or network monitoring, so there is a big security risk

[0021] It can be seen from the above that the existing commonly used identity authentication methods have low identity authentication security and damage the interests of legitimate users. In addition, there are also the following defects:

[0023] (2) Higher cost

[0024] (3) Complex maintenance

[0025] (4) The applicable scenarios are limited and the convenience is poor

Images