System and method for dynamic password authentication based on dual channels

Abstract

The invention discloses a system and method for dynamic password authentication based on dual channels, which are used in the technical field of information in order to solve the problem that account information is stolen and illegally used. According to the invention, another channel, such as a link of a user cell phone client or a dynamic token, is added on the basis that dynamic password generation and authentication is realized via one channel in the prior art, so as to ensure that a user confirms transaction information through the second channel client; a challenge code is generated according to the transaction information, a dynamic password is generated according to the challenge code, as a result, the user can validate personal transaction information when conducting e-banking-related operations; and the transaction information is used as a challenge factor to generate a dynamic authentication password, and the dynamic authentication password is authenticated through an authentication server to realize safe transaction. In the embodiment of the invention, by means of diversified and complex association information and a challenge token at the cell phone client, the transaction action is prevented from falsification when a user logs in or performs account-related operations, thereby the safety during dynamic password authentication is further reinforced, the account using safety for users is increased and the user experience is enhanced.

Description

technical field [0001] The invention relates to the field of information technology, in particular to a dual-channel based dynamic password authentication system and method. Background technique [0002] With the development of the application field of smart cards, users have higher and higher requirements for the application functions of smart cards. It is hoped that smart cards can provide more and more application functions to meet people's safety, convenience and diversification in the use process. need. However, the networked information application system realizes information sharing and extensive and in-depth application, but also brings about the problem of data security. If there is no sufficient security guarantee, the storage, sharing and transmission of information on the public communication network may be Illegal eavesdropping, interception, tampering or destruction, the development of information technology makes information security issues more and more peop...

AI Technical Summary

Problems solved by technology

However, the password used by the user is different each time. Even if the hacker intercepts the password once, it cannot use this password to impersonate a legitimate user.

[0005] Dynamic password authentication has strengthened the security of users' account information access and other operations to a certain extent, but it still cannot guarantee the security in the event of information theft.

For example, some current phishing websites, by introducing users to illegal websites, provide a user interface very similar to regular online banking websites, and induce users to enter their own account information, such as user names, passwords and even bank accounts, without vigilance. Dynamic authentication password, the phishing website immediately logs in to the official online banking website after obtaining the information, and then performs online banking operations, such as transfer or online banking consumption, causing great losses to users

Images