Composite dynamic password authentication method and authentication system applicable to plug-and-play terminal

Abstract

The invention discloses a composite dynamic password authentication method and an authentication system applicable to a plug-and-play terminal. The method and the system comprise the following steps: providing remote time service to an embedded terminal through a server, and calculating a first key K1 and feeding back the first key K1 to the server according to time factor change T' and a built-in static key C through the terminal; generating a random number group A according to the situation that terminal right is authenticated by using K1 through the server, and calculating second keys K2, wherein the random number group A comprises a change factor ai, and K2 are HASH values of A, T', C and a built-in dynamic key D; receiving K2 through the terminal, comparing K2 with K2' calculated by the terminal, if the result shows that K2 is accordant with K2', determining whether a password is jumped or not according to characteristic values calculated according to T', if the password is jumped, obtaining ai in the random number group A according to a sequence L and a pointer P, calculating a new key D' according to D so as to replace the key, and loading the new key D' into a non-volatile memory. Two time/event synchronous dynamic password modes are adopted simultaneously, the change characteristics of the password are increased, and the method and the system are particularly applicable to bidirectional authentication of plug-and-play terminals and servers.

Description

technical field [0001] The invention relates to a composite dynamic password authentication method and system, in particular to a plug-and-play embedded terminal and cloud server authentication method and system, belonging to the field of Internet of Things security authentication. Background technique [0002] With the increasing demand for network security, dynamic password (or dynamic password, OTP) technology has increasingly entered people's daily life, from the initial bank, to later e-commerce, online games and other systems, from the very beginning to online Business applications are the main focus, and later various embedded terminals such as dynamic password car remote controls. With its ever-changing characteristics, dynamic password technology provides more security guarantees for various systems and public users. In the foreseeable next few years, due to the rapid popularization of the Internet of Things, various embedded terminals will control the permissions ...

AI Technical Summary

Problems solved by technology

[0004] Generally speaking, when traditional dynamic cryptography technology is applied to embedded terminal equipment, it has certain requirements for environmental conditions and equipment capabilities, and it is easy to face the risk of out-of-sync. Easily acquired, hijacked, rewritten

Images