Offline physical isolation authentication method and authentication system thereof

Abstract

The invention discloses an off-line physical isolation authentication method, which comprises hardware equipment and a service platform, and comprises the following steps that: the hardware equipmentrandomly generates a pair of public key and private key, the private key is only written and stored, and the public key is displayed; the user acquires hardware equipment and a corresponding public key; the user applies for binding to the service platform through a public key, wherein the public key is used for verifying the identity of the user; the user is bound with the hardware equipment in the service platform; when the service platform needs to verify the identity of the user, a first authentication code is generated for a string of random information; the user scans the first authentication code by using the hardware device; the hardware equipment signs the scanned first authentication code data through a private key, and generates a second authentication code from signed information; and the service platform scans the second authentication code and then carries out verification by using the public key of the user so as to authenticate the user identity and return authenticationinformation. The invention further discloses an authentication system for offline physical isolation. The authentication process is offline and physically isolated.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to an off-line physical isolation authentication method and an authentication system thereof. Background technique [0002] With the continuous development of Internet technology, security certification is becoming more and more important. Especially in the financial field and IoT scenarios, the security of authentication directly determines the quality of a product. Looking at the industry, some current security certifications probably include one-time SMS verification codes, hardware tokens, mobile phone tokens, and push-based authentication tokens. One-time SMS verification code refers to the use of SMS as an authentication factor. A random six-digit number is sent to the user's mobile phone by text message, so in theory only people with the correct mobile phone can pass the verification. Hardware tokens, as an important method in active multi-factor authenticatio...

AI Technical Summary

Problems solved by technology

However, all of the above methods require networking or physical contact. At the same time, with the development of hacker technology, any method with network connection and physical contact will have the possibility of being hacked.

Images