Multi-factor identity authentication method and system

Abstract

The invention discloses a multi-factor identity authentication method and system. The multi-factor identity authentication method comprises a registration phase and an authentication phase, wherein in the registration phase, a current user is set as C, and registration is performed through a user login name and a login password; the authentication phase comprises bidirectional authentication and login association of a client and a server side: the server side verifies client information in combination of a random number and hardware fingerprint, the client verifies the server side through a public key returned by a server during registration, and the server side performs login association of current login and next login. The non-hardware multi-factor identity authentication method can meet the requirements for identity authentication and information safety, integrity and non-repudiation during login of the identity authentication system; hardware equipment is not required, and the method is convenient to implement.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a multi-factor authentication method and system thereof. Background technique [0002] With the rapid development of Internet technology, more and more Internet applications are provided through the Internet. When users access these Internet applications, such as accessing e-mail, accessing instant messaging applications, visiting websites, etc., in order to ensure the security of access, the provider of each Internet application usually needs to authenticate the user when the user logs in. [0003] From the perspective of basic principles, identity authentication can be divided into three categories according to different authentication factors: information known to users (such as passwords); physical media held by users, generally tokens, smart cards, etc.; , which is the biometric authentication method. For multi-factor authentication, currently domestic and ove...

AI Technical Summary

Problems solved by technology

[0008] 1. Multi-factor authentication includes hardware factors, such as tokens, smart cards, etc., which will bring the following problems to authentication: loss of hardware leads to inability to authenticate, the introduction of hardware conflicts with the original Key in the enterprise, and increases the cost of the enterprise (such as USB Key. The disadvantage is that the deployment and maintenance costs of the CA center are very huge), etc.

[0009] 2. One-way authentication methods cannot resist man-in-the-middle attacks

The user cannot verify the identity of the server, and there is a risk of the server being impersonated

Images