Dynamic password generating method and system

Abstract

The invention discloses a dynamic password generating method and system. The method comprises the steps that various dynamic heterogeneous messages are spliced to form a clear text S, and the clear text S is digitally signed for N times to obtain an encrypted byte stream S2; one byte is selected from the S2 and is converted into a numerical value a; remainder operation is executed: i=a%*length of dynamic password character library; the ith character is selected from the dynamic password character library, and the position of a dynamic password is covered; and the dynamic password generating process is repeated until the length of the dynamic password meets the requirement. The system comprises a clear text splicing module, a signing module, a converting module, a dynamic password character library, a remainder module, a password splicing module and a distinguishing module. The dynamic password generating method provided by the invention integrates the advantages of a random number algorithm and a digital signature algorithm, so that the dynamic passwords obtained in the same transaction by the same operator in different time are definitely different; and the dynamic password is generated only in use, the recurrence rate is very low, and the security is higher.

Description

technical field [0001] The invention belongs to the technical field of information security, in particular to a method and system for generating a dynamic password. Background technique [0002] With the popularization of Internet application services, users conduct more and more transactions on the Internet. Due to the openness, unreliability and peer-to-peer nature of the Internet, information security has become a key issue. Especially for Internet-based online banking services, information security is the most basic, critical and most in need of attention. [0003] When users use high-risk online banking services, such as transfer services and payment services, they must enter the correct password before the bank can provide services to users. Usually, the password entered by the user is the inherent password of their account, because the inherent password entered by the user must be transmitted to the server of the business center through the Internet, so entering the...

AI Technical Summary

Problems solved by technology

Usually, the password entered by the user is the inherent password of their account, because the inherent password entered by the user must be transmitted to the server of the business center through the Internet, so entering the inherent password will reduce the security of the transaction, and illegal attackers can easily use network attacks and other methods Steal user's inherent password

Images