Dual authentication method, system and device for SSH safe login

Abstract

The invention discloses a dual authentication method for SSH safe login. The method includes the following steps: a client sends a user name and a password or certificate, and a user uses the user name and the password or certificate to log in a managed SSH authentication server; if the user name and the password or certificate are valid, the SSH authentication server returns a two-dimensional code to be displayed on the client; the user uses an intelligent terminal to scan the two-dimensional code displayed on the client; the intelligent terminal generates signature information for a login session of this time to a two-dimensional verification server or the SSH authentication server through the two-dimensional code, a built-in certificate and a hardware token thereof; and the SSH authentication server verifies whether the signature information is correct, and if the signature information is correct, the SSH authentication server logs in successfully. The dual authentication method for SSH safe login has the beneficial effects that a secondary authentication process based on a two-dimensional code is added, and two-dimensional code information is leaked, is unique and cannot be repetitive, thereby greatly improving security of login verification of the SSH authentication server, and preventing the problem of identity theft caused by user password loss.

Description

technical field [0001] The present invention relates to the technical field of information security, in particular to a double authentication method, system and device for SSH secure login. Background technique [0002] In the earliest days, Internet communications were all plaintext communications, and once intercepted, the content would be exposed without a doubt. In 1995, Finnish scholar Tatu Ylonen designed the SSH protocol, which encrypted all login information and became a basic solution for Internet security. It was quickly promoted all over the world and has now become the standard configuration of Linux systems. [0003] SSH is a network protocol used for encrypted logins between computers. If a user logs in to another remote computer using the SSH protocol from a local computer, it can be considered that this login is safe, even if it is intercepted midway, the password will not be revealed. As Linux devices gradually expand from computers to mobile phones, perip...

AI Technical Summary

Problems solved by technology

[0006] This process itself is safe, but there is a risk: if someone steals the user's login password and then pretends to be the user, it will be difficult for the server to distinguish the authenticity

[0007] With the increasing number of user password leakage incidents, the risk of user password leakage is very high, and the security cannot be guaranteed.

Usernames and passwords are easily stolen by malicious code in the terminal device when entered through the keyboard, thereby reducing the security of authentication

Therefore, the user name / password mode of the client becomes the weak link of the entire SSH authentication security

Images