Authentication method based on USB-key

Abstract

The invention discloses an authentication method based on a USB-key. The method comprises the following steps: presetting a PIN code and computing a hash value; verifying the PIN code and generating averification instruction by a client, and encrypting the verification instruction to acquire a first encrypted code; analyzing the first encrypted code to acquire a verification instruction to generate a first random code, and encrypting the first random code to acquire a second encrypted code; analyzing the second encrypted code to acquire the first random code, encrypting the first random codeto acquire the third encrypted code, and encrypting the third encrypted code to acquire the fourth encrypted code; analyzing the fourth encrypted code to acquire the third encrypted code, encrypting the first random code to acquire a fifth encrypted code, and passing the verification if the fifth encrypted code is consistent with the third encrypted code. The system is used for executing the method. The data transmission security is improved by establishing a basic verification system based on PKI / CA, the later authentication procedure is processed based on a session key authenticated at earlystage, the eavesdropping on the data can be effectively avoided, thereby preventing the PIN code from leaking.

Description

technical field [0001] The invention relates to the technical field of USB-key authentication, in particular to an authentication method based on a USB-key. Background technique [0002] With the development of the Internet, identity authentication has been applied in e-commerce, online banking transactions, and personal data confidentiality. Among various identity authentication methods, the smart password key (USB-key) is widely used as a safe and reliable identity authentication method. As an identity authentication device, USB-key can realize key information such as identity authentication, digital signature, access control, data encryption and decryption, and storage of keys and passwords. Usually, USB-key is used for identity authentication with the hardware itself. , the stored key and the PIN code set by the user are used as the basis for personal identity authentication. Among them, the PIN code is used as the authorization method for the user to access the hardwa...

AI Technical Summary

Problems solved by technology

[0004] Based on the deficiencies in the prior art, the purpose of the present invention is to provide a safe and effective PIN code identity authentication method for USB-key to solve the problem. After the PIN code is directly encrypted and decrypted at the client and USB-key Compared with the existing PIN code leakage risk

Images