Authentication management system, method and device

Abstract

The invention belongs to the technical field of network authentication, and particularly relates to an authentication management system, method and device. The system comprises authentication requestunits arranged on different computer devices; each authentication request unit at least comprises a radio frequency unit, a network identifier storage unit, an authentication verification unit and a wireless data transmission unit; the system further comprises network construction units arranged on the different computer devices. And the network construction unit responds to a command of the authentication request unit and constructs an encryption sub-network, and the encryption sub-network is used for data transmission of two computers passing authentication verification. The method has the advantage of high safety, and meanwhile, automatic authentication connection is realized.

Description

technical field [0001] The invention belongs to the technical field of network authentication, and in particular relates to an authentication management system, method and device. Background technique [0002] At present, scenarios such as using user terminals to operate online banking, conduct e-commerce transactions, and rich media (Rich Communication Suit, RCS) communications are becoming more and more common. Wi-Fi networks in public places may be malicious, and malicious Wi-Fi networks may affect network messages. It will be very easy to monitor and intercept network messages even in secure Wi-Fi networks or operator data networks. [0003] For example, when a user logs in to an e-commerce website for online shopping and completes the transaction, the user needs to enter sensitive information such as payment account number and password. The network between the terminal operated by the user and the server of the e-commerce website or the payment server is unreliable. Ye...

AI Technical Summary

Problems solved by technology

[0002] At present, scenarios such as using user terminals to operate online banking, conduct e-commerce transactions, and rich media (Rich Communication Suit, RCS) communications are becoming more and more common. Wi-Fi networks in public places may be malicious, and malicious Wi-Fi networks may affect network messages. It will be very easy to monitor and intercept, even in a secure Wi-Fi network or operator data network, there is a possibility of network messages being monitored and intercepted

[0003] For example, when a user logs in to an e-commerce website for online shopping and completes the transaction, the user needs to enter sensitive information such as payment account number and password. The network between the terminal operated by the user and the server of the e-commerce website or the payment server is unreliable. Yes, it may be monitored and intercepted by hackers, thus leaking information such as account numbers and passwords, resulting in economic losses for users

Therefore, a secret key for encryption needs to be negotiated between the user terminal and the server to encrypt the communication content. At present, in practical applications, there are two schemes for establishing a secure encrypted channel. One scheme is to use the key exchange algorithm Obtain the key for communication between the two parties to encrypt the communication content. This key exchange scheme cannot solve the problem of man-in-the-middle attacks and cannot guarantee the security of communication; another solution is to use public and private keys and certificates to obtain the key for communication between the two parties , used to encrypt the communication content. In this scheme, one party to the communication needs to apply for a certificate from an authoritative certificate issuing center (CertificateAuthority, CA), which needs to pay a certain fee. Usually, the certificate has a certain validity period and needs to be replaced regularly.

Images