user identification system

Abstract

The invention discloses a user identification system, comprising the following steps: the user inserts a USB KEY, the client sends an authentication request to the authentication server; the authentication server receives the request and generates a random character string X; the authentication server sends X to the client ; The client uses the first algorithm to calculate the information + X in the USB KEY, and the calculation result is Rh; the client sends Rh to the authentication server; the authentication server uses the first algorithm to store the information + X in the user's USB KEY The operation result is Rh1; the authentication server compares Rh and Rh1, and if they are consistent, the verification is successful; the comparison result is sent to the application server, and the application server judges whether the user can log in according to the comparison result. The invention eliminates the system security problem caused by the traditional login mode of "user name + password", and ensures the security and accuracy of identity authentication.

Description

technical field [0001] The invention relates to the field of information security, in particular to a user identification system. Background technique [0002] With the continuous development of the Internet and information technology, information exchange through the network is undoubtedly a more economical and effective way of working. Its application provides enterprises and customers with more economical, efficient and better-service office space. While people are using the network, they begin to pay close attention to the security of information, and more and more network security requirements are presented. The "username + password" identity authentication method currently used by many application systems has very weak security, and the user name and password are easy to be stolen and cause losses; moreover, the "username + password" authentication method is also very inconvenient for users to use. , users often need to remember complex usernames and passwords. Cont...

AI Technical Summary

Problems solved by technology

The "username + password" identity authentication method currently used by many application systems has very weak security, and the user name and password are easy to be stolen and cause losses; moreover, the "username + password" authentication method is also very inconvenient for users to use. , users often need to remember complex usernames and passwords