Two-factor verification method for user to log in government affair cloud application

Abstract

The invention discloses a two-factor verification method for a user to log in a government affair cloud application. The verification method involves a client and a server and comprises steps as follows: firstly, the server and the client adopt an MD5 algorithm with the same factor to produce password information and process the password information into eight-byte character strings; cycle time is set, new passwords are produced periodically, time information is adjusted through random numbers, and the server acquires corresponding information when an input dynamic password is used; a password string is input for verification when the user logs in the application, and the server provides the current password string and a password string produced last time for comparison. Compared with the prior art, the two-factor verification method for the user to log in the government affair cloud application, the client and the server are in a non-communicated and non-interactive mode, the passwords are calculated independently, the log-in safety of the government services cloud interior application is greatly improved by periodically coordinating password matching and using a traditional user name and password mode, and the method is simple, convenient and easy to implement, has operability and is applicable to the situation when an internal network requires two-factor verification before the application is logged in.

Description

technical field [0001] The invention relates to the technical field of cloud computing security, in particular to a highly practical and two-factor authentication method for government cloud application user login. Background technique [0002] Government cloud is the use of cloud computing technology to make overall use of existing computer rooms, computing, storage, network, security, application support, information resources, etc., to play cloud computing virtualization, high reliability, high versatility, high scalability and fast , on-demand, flexible services and other features, providing government industries with comprehensive service platforms such as infrastructure, supporting software, application systems, information resources, operation guarantees, and information security. Government cloud is the main business scenario for cloud computing at present. From the network, government cloud includes two parts: the national e-government extranet and the Internet. Co...

AI Technical Summary

Problems solved by technology

The server-side time acquisition method of this patent is complicated, which is not conducive to specific use and implementation; there are few algorithm factors, and if the algorithm used is known, the dynamic password can be obtained by self-calculation; there is no good solution to the coordination between the client and the server and the confidentiality of information The problem is that there is no basic trust information established between the client and the server without disputes

Images