Database multiple authentication method and system, terminal and storage medium

Abstract

The invention provides a database multiple authentication method and system, a terminal and a storage medium, and the method comprises the steps: initializing a hardware authentication certificate carrier through a programming interface, and storing a public key and a user certificate public name of the hardware authentication certificate carrier; taking the user certificate public name as a database user name, and generating a standard information abstract value of the database user name; receiving an authentication request sent by the client, verifying a user certificate in the authentication request, and returning an initial random number to the client after the verification is passed; receiving a signature random number sent by a client, and decrypting the signature random number by using the public key to obtain a random number; and if the random number is consistent with the initial random number, obtaining an information abstract value of a client user name, and if the information abstract value of the client user name is consistent with the standard information abstract value, determining that the client passes the authentication. According to the invention, the security ofthe database and the confidentiality of the user are improved.

Description

technical field [0001] The invention relates to the technical field of database authentication, in particular to a database multi-authentication method, system, terminal and storage medium. Background technique [0002] With the continuous advancement of informatization, data security and business operation reliability are becoming more and more important. After identity verification, the legal authentication of the user who logs into the database is completed. All information in the computer network world, including the user's identity information, is represented by a set of specific data. The computer can only recognize the user's digital identity. Authorization of user digital identities. [0003] How to ensure that the operator who operates with a digital identity is the legal owner of the digital identity, that is to say, to ensure that the physical identity of the operator corresponds to the digital identity. Identity authentication is to solve this problem and serve ...

AI Technical Summary

Problems solved by technology

[0004] PostgreSQL currently only supports one authentication method, and most of them use md5 password authentication. The security of md5 password is not strong, so there is a risk of password leakage

Images