Password authentication method in network application and system

Abstract

The invention relates to a password authentication method in network application and a system. The method comprises the following steps that: a random character string is obtained according to a triggered login event; a password input by a user and user identification are obtained; the password input by the user and the random character string form authentication information; the authentication information is encrypted, and the user identification and the encrypted authentication information are transmitted to a server; and the server authenticates the user identification and the encrypted authentication information. In the password authentication method and the system, disclosed by the invention, since the password input by the user and the obtained random character string form the authentication information and the encrypted authentication information is transmitted to the server, the security during password authentication is improved and the situation that the authentication information is intercepted by malicious software during transmission is avoided; and since the random character string is added into the authentication information and the encryption is conducted, the probability that the authentication information is cracked violently is greatly reduced.

Description

【Technical field】 [0001] The invention relates to the field of information security, in particular to a password verification method and system in network applications. 【Background technique】 [0002] With the development of computer network applications, there are more and more network applications such as online games, virtual communities, and online transactions. At the same time, the security problems of these network applications are becoming increasingly prominent. [0003] In most network applications, the user uses the application program provided by the server through the client, and the server usually requires the user to enter the corresponding password and account information, and can only enter the corresponding application program after verification, so as to prevent illegal users from entering. However, due to the complexity of the network environment, user passwords are often cracked, which greatly reduces the security of network applications. [0004] When ...

AI Technical Summary

Problems solved by technology

However, due to the complexity of the network environment, user passwords are often cracked, which greatly reduces the security of network applications.

[0004] When the user enters passwords and account numbers on the client side, the client side encrypts the input information and reports it to the server side, and the server side decrypts and verifies the received input information, but often passes the input information on the client side In the process of reaching the server, it is convenient for malicious software to intercept the user's input information, and then make the encrypted password cracked by violence

Images