Multi-channel active type network identity verification system and network identity verification device

Abstract

The invention provides one of multi-channel active type network identity verification systems. The multi-channel active type network identity verification system comprises a user end device and a service providing end system. The service providing end system comprises a service processing module and a safety certificating module. When the service processing module receives a service request sent from the user end device through a first transmission channel, the safety certificating module can generate a challenge value through a challenge response algorithm, and the service processing module is used for transmitting the challenge value to the user end device. The user end device generates a response value corresponding to the challenge value through a verification data generating module, the response value is encrypted to generate safety verification data, then the safety verification data is sent back to the safety verification module in a short message mode through a second transmission channel, and a network identity verification program can be completed. According to the system, non-repudiation and safety of the safety verification data sent by the user end device can be improved, and accuracy and reliability of network identity verification can be effectively strengthened.

Description

technical field [0001] The invention relates to a network security control mechanism, in particular to a multi-channel active network identity verification system and related multi-channel network identity verification devices and active network identity verification devices. Background technique [0002] With the increasing popularity of various network service applications, the importance of network information security is also increasing. The traditional way to log in to remote network service systems (such as online banking, online ordering, online games, enterprise internal network systems, etc.) is to use the user account and password to verify the identity of the login. Along with malicious programs such as Trojan horse programs, keyloggers, screen loggers, phishing, man-in-the-middle attacks, replay attacks, etc. The advancement of technology has made the identity verification method that only uses user account numbers and passwords face major information security t...

AI Technical Summary

Problems solved by technology

[0006] Even if the above-mentioned dynamic password has a time limit, it is still enough for malicious people to pretend to be the user's identity and tamper with the content of online transactions within the validity period of the password, causing the user's money loss

[0007] In addition, there have also been cases where hackers pretended to be users and lied to the telecommunications company about the loss of the mobile phone SIM card, and obtained a SIM card with the same phone number from the telecommunications company.

At this time, the hacker can receive the dynamic password issued by the online banking system to the user, and use the online banking service as the user's identity, causing the user's money loss

[0008] It can be seen from the above description that the method and system proposed in Taiwan Patent No. I288554 still have obvious information security loopholes, and cannot effectively verify the identity authenticity of network users and ensure the security of network transactions

Images