Two-factor authentication method based on digital certificate and biological identification information

Abstract

The invention discloses a two-factor authentication method based on a digital certificate and biological identification information. The main idea of the method is that a certificate authority (CA) digital certificate is transmitted to a mobile phone or a personal computer (PC) terminal of a user which is a normal user or a financial approval leader in a server such as a server of an accounting document management system, the digital certificate can pass the authentication of a third-party authority electronic authentication center, validity of the user is verified by the digital certificate, and the biological identification information is used as a respective private key in a digital certificate key pair which is used by the server and a client in the authentication process of the digital certificate to further ensure the security of authentication; and the biological information such as iris information and fingerprint information is identity inherent information and cannot be copied or stolen, so that the absolute security of authentication can be ensured.

Description

technical field [0001] The invention belongs to the technical field of digital security authentication, and in particular relates to a security authentication method based on double authentication of digital certificate and biological information identification, which can be applied to an accounting certificate management system with relatively strict requirements on identity authentication. Background technique [0002] The rapid development of computer network and information technology not only promotes the rapid development of informatization, but also brings many new security problems and risks. As the first security checkpoint of the information system, the identity authentication system is an important measure to ensure that only legitimate users can access the information system and read and write information. The traditional username and password authentication method is easy to implement and low in cost, but because the password is static data, it needs to be trans...

AI Technical Summary

Problems solved by technology

However, although digital certificates can guarantee the non-repudiation of both parties to the transaction, they still cannot guarantee the absolute security of the transaction. For example, after the digital certificate is lost or stolen, such as a notebook or mobile phone with a digital certificate installed is lost and used by others. The problem

[0003] The above problems are particularly prominent in the accounting voucher management system. This is because, for accounting companies, they are entrusted by corporate customers to manage financial affairs for the company; at the same time, they are also subject to the supervision and management of the national taxation department. When the accounting voucher management system is formed, there are strict requirements for the identity of the operator. The accounting vouchers for each transaction need to be signed or authorized by the leaders of the relevant departments of the enterprise. When applying the accounting voucher management system through the computer network, For accounting companies, if only the relevant leaders of corporate customers are required to use digital certificates (usually digital authentication client application plug-ins) for identity authentication, it is impossible to ensure that the leaders using the digital certificates are themselves. Losses or inauthentic transactions will bring losses to the company on the one hand, and on the other hand, it is impossible to clarify the responsibility when pursuing future responsibilities

Images