A kind of OTP authentication method and system based on two-dimension code

Abstract

The embodiment of the present invention discloses an OTP authentication method and system based on a two-dimensional code, belonging to the technical field of security authentication. The method includes: the dynamic token receives a user's dynamic password generation instruction, generates a two-dimensional code of the dynamic password according to the instruction, and sends the two-dimensional code of the dynamic password to a display screen of the dynamic token for display; the mobile terminal scans and analyzes the dynamic password. The two-dimension code of the dynamic password shown on the display screen of the token obtains the dynamic password, and the dynamic password is sent to the dynamic password verification server; the dynamic password verification server receives the dynamic password sent by the mobile terminal, and according to the dynamic password Authenticate. The method and system do not require the user to manually input the dynamic password, which improves the user experience, and because no manual input is required, the form of the password does not need to be limited to the form of pure numbers, which can greatly increase the complexity of the password and improve the dynamic password based on the dynamic password. Security and convenience of password authentication.

Description

technical field [0001] The invention relates to the technical field of security authentication, in particular to an OTP authentication method and system based on a two-dimensional code. Background technique [0002] OTP (One-Time Password) dynamic password, also known as one-time password, is an authentication technology that uses cryptographic technology to share secrets between the client and the server. It is a very convenient technology to enhance the current static password authentication. The method can effectively protect the authentication security of transactions and logins. Using dynamic passwords does not need to change passwords regularly, which is safe and worry-free. Dynamic tokens are terminal devices used to generate dynamic passwords. [0003] Technically, dynamic tokens can be roughly divided into three categories, time-based, event-based and challenge-response. At present, most dynamic token products are limited by the limitation of input equipment (numer...

AI Technical Summary

Problems solved by technology

At present, most dynamic token products are limited by the limitation of input equipment (numeric keypad), and usually generate 6 or 8 digits as dynamic passwords. When users use dynamic token products for authentication, they need to manually pass the 6 or 8 digits Enter the number into the transaction confirmation column and submit it to complete the transaction confirmation process. For the challenge-response token, when the dynamic password is generated, the user must first input the challenge code used to generate the dynamic password into the dynamic token. , and in the process of manual entry, it is also easy to cause input errors, and the user experience is poor

Images