System and method for login authentication

Abstract

The invention provides a system and a method for login authentication. The method comprises the steps of: sending login request information by a login end, wherein the login request information comprises a user name; receiving the login request information by an authentication end, after confirming that the login end is a blockchain user, initiating blockchain identity authentication for the loginend; performing second authentication on the login end by the authentication end after the blockchain identity authentication is passed; acquiring user identity information of the login end by the authentication end, and acquiring user identification and a certification organization public key from a blockchain; and verifying the user identity information by using the user identification and thecertification organization public key by the authentication end. The system and the method of the invention have the beneficial effects that: the identification stored in the blockchain can not be tampered, thereby improving security and reducing IT maintenance cost of an enterprise; the second authentication is performed after the identity authentication is passed, thereby greatly improving enterprise level Wi-Fi security; and verification is based on the user identity information, the user does not need to input a Wi-Fi login key, thereby effectively preventing a stealing behavior of a Wi-Fiall-purpose key app.

Description

technical field [0001] The present invention relates to the field of Internet technology, in particular, to a system and method for login authentication, especially to a Wi-Fi login authentication method based on block chain identity authentication. Background technique [0002] With the development of Internet technology and enterprise information technology, Wi-Fi is widely used in terminal access in different scenarios. However, due to the low security performance of Wi-Fi, it is easy to install the Wi-Fi master key app on terminal equipment. Steal the password and share it with everyone. Once the Wi-Fi password is stolen, the corporate network is wide open for hackers to easily enter. [0003] At present, the enterprise adopts a high-security enterprise network, and Wi-Fi security adopts 802.1x+RADIUS authentication. Each user is assigned a unique user name and password, and the user name and password are strictly protected by local security. The Wi-Fi master key is diff...

AI Technical Summary

Problems solved by technology

[0006] However, the authentication data stored in the blockchain network and associated with the user identity representation described in the patent document CN107257340A includes the authentication results of a third-party authentication agency. Generally, there are multiple third parties, such as civil affairs bureaus, public security bureaus, schools, etc. , companies, etc., the third-party certification agency’s certification results are normal or abnormal, and the certification is passed or the certification is not passed. The shortcomings of this certification method lie in the following two points: 1. User privacy information is easily leaked The authentication result is directly written to the blockchain and stored in the public cloud, which has poor information confidentiality; 2. The verifiable identity information provided is very limited, and simple identity identification cannot meet the identity authentication requirements. For example, some services require authentication The user's mobile phone number, or the user's company name needs to be verified, and the authentication method cannot be resolved

[0008] However, the user identity authentication in the patent document CN106357640A is based on judging whether there is a first transaction in the block chain that pays from the first block chain account address to the preset second block chain account address. However, the existence of transaction records cannot To prove that the user is a legitimate user, identity authentication through transaction records is not feasible in principle, and cannot be used as a proof element of a legitimate user

Moreover, the identity authentication of the user through the transaction record can only verify that the user has traded, but cannot verify other information of the user, nor can it be used as a certificate for the user to log in to the server

Moreover, the above-mentioned patent documents do not mention secondary authentication, which is prone to deception, for example, using other user information for identity authentication, but it cannot be sure that the authentication request is the person

Images