WO2002023970A2 - Procede d'identification totalement dynamique sans identificateur - Google Patents

Procede d'identification totalement dynamique sans identificateur Download PDF

Info

Publication number
WO2002023970A2
WO2002023970A2 PCT/CN2001/000887 CN0100887W WO0223970A2 WO 2002023970 A2 WO2002023970 A2 WO 2002023970A2 CN 0100887 W CN0100887 W CN 0100887W WO 0223970 A2 WO0223970 A2 WO 0223970A2
Authority
WO
WIPO (PCT)
Prior art keywords
authentication
identifier
code
identification process
dynamic identification
Prior art date
Application number
PCT/CN2001/000887
Other languages
English (en)
French (fr)
Inventor
Mengfu Ci
Original Assignee
Mengfu Ci
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Mengfu Ci filed Critical Mengfu Ci
Priority to AU2001272312A priority Critical patent/AU2001272312A1/en
Publication of WO2002023970A2 publication Critical patent/WO2002023970A2/zh

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F15/00—Digital computers in general; Data processing equipment in general
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/14—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols using a plurality of keys or algorithms
    • H04L9/16—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols using a plurality of keys or algorithms the keys or algorithms being changed during operation
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3226—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using a predetermined code, e.g. password, passphrase or PIN
    • H04L9/3228—One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key

Definitions

  • the invention relates to a non-marking dynamic authentication method.
  • authentication technologies usually include static identifications, such as user names and serial numbers.
  • An object of the present invention is to provide a method for full dynamic authentication without identification, which can prevent an attacker from performing tracking record analysis on authentication information, and thus has better security.
  • FIG. 1 is a schematic flowchart of the present invention.
  • the present invention discloses a fully dynamic authentication method without identifier, FIG. 1, the source code fully dynamic authentication code without identifier by the authentication code 1 1; 1 2, ising, ⁇ ⁇ ; and dynamic authentication code ⁇ ⁇ 2, ising, P ⁇ constitute.
  • the authentication elements may not be limited to I and P.
  • the code arrangement may be in any other order.
  • the value of the authentication identification code (I,, 1 2 , ..., I K ) in the original code is constant, but the dynamic authentication code (PP 2 , ..., P N ) change according to the law determined by a certain key.
  • the client encrypts the original code (the encryption method is not limited, and the authentication key can be unchanged or changed each time). At this time, you will get a static identification and characteristics that can not be identified, and each authentication will change full dynamic authentication code (MM 2, ??, M K + 1, M K + 2, ising, M K + N).
  • the unidentified full dynamic authentication code is transmitted to the verifier through an insecure channel, and the verifier performs corresponding verification according to the identification code after decryption.
  • the unidentified full dynamic authentication method has higher security because it makes it impossible for attackers to track and analyze the authentication information.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Hardware Design (AREA)
  • Physics & Mathematics (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Storage Device Security (AREA)

Description

无标识全动态认证法
本发明所属技术领域
本发明涉及一种无标识动态认证法。
在本发明之前的现有技术
现有计算机安全领域， 认证技术通常都含有静态标识， 如用户名、 序号等。 本发明的目的
本发明的目的在于提供一种无标识全动态认证方法， 该方法能使攻击者无 法对认证信息进行跟踪记录分析， 因而具有更髙的安全性。
附图说明
图 1本发明的流程示意图。
本发明的技术方案
本发明公开了一种无标识全动态认证方法， 如图 1， 无标识全动态认证码的 原始码由认证标识码 11 ; 12， ……， ΙΚ; 及动态认证码 Ρ Ρ2， ……， ΡΗ构成。 其 中认证要素可以不限于 I、 Ρ。 码排列方式也可以是其他任意的顺序。
对任一认证个体， 原始码中认证标识码值 (I, , 12， ......， IK)是不变的， 但动 态认证码 (P P2， ......， PN)按照某一密钥确定的规律进行变化。
认证时客户端将原始码进行加密 （加密方法不限， 每次认证密钥可以不变也 可以变化）， 此时将得到一没有静态标识和特征可供辨识的， 并且每次认证都会 发生变化的全动态认证码 （M M2， ……， MK+1， MK+2, ……， MK+N)。 将此无标 识全动态认证码通过不安全信道传送给验证方， 验证方解密后根据标识码进行相 应的验证。
无标识全动态认证方法由于使攻击者无法对认证信息进行跟踪记录分析， 因 而具有更高的安全性。

Claims

权 利 要 求 、 一种无标识全动态认证方法， 其特征是在进行认证时验证方得到的认证 码无可供辨识的静态标识和特征， 且认证码每次认证都发生变化。
PCT/CN2001/000887 2000-09-20 2001-06-01 Procede d'identification totalement dynamique sans identificateur WO2002023970A2 (fr)

Priority Applications (1)

Application Number Priority Date Filing Date Title
AU2001272312A AU2001272312A1 (en) 2000-09-20 2001-06-01 Fully dynamic identification process without an identifier

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN00124551 2000-09-20

Publications (1)

Publication Number Publication Date
WO2002023970A2 true WO2002023970A2 (fr) 2002-03-28

Family

ID=4590493

Family Applications (2)

Application Number Title Priority Date Filing Date
PCT/CN2001/000887 WO2002023970A2 (fr) 2000-09-20 2001-06-01 Procede d'identification totalement dynamique sans identificateur
PCT/CN2001/001401 WO2002025860A1 (en) 2000-09-20 2001-09-17 The dynamic identification method without identification code

Family Applications After (1)

Application Number Title Priority Date Filing Date
PCT/CN2001/001401 WO2002025860A1 (en) 2000-09-20 2001-09-17 The dynamic identification method without identification code

Country Status (8)

Country Link
US (1) US20040030892A1 (zh)
EP (1) EP1326364A4 (zh)
JP (1) JP2004509424A (zh)
KR (1) KR20030051648A (zh)
AU (2) AU2001272312A1 (zh)
CA (1) CA2422051A1 (zh)
RU (1) RU2275747C2 (zh)
WO (2) WO2002023970A2 (zh)

Families Citing this family (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US8195952B2 (en) 2004-12-14 2012-06-05 International Business Machines Corporation System and method of facilitating the identification of a computer on a network
JP6061122B2 (ja) * 2009-02-04 2017-01-18 データ セキュリティー システムズ ソリューションズ プライヴェート リミテッド 静的パスワードシステムの２ファクタ認証になる変換
CZ309308B6 (cs) * 2013-07-12 2022-08-17 Aducid S.R.O. Způsob zadávání tajné informace do elektronických digitálních zařízení
CN103944908A (zh) * 2014-04-25 2014-07-23 天地融科技股份有限公司 数据更新方法和系统

Family Cites Families (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4578530A (en) * 1981-06-26 1986-03-25 Visa U.S.A., Inc. End-to-end encryption system and method of operation
US4720860A (en) * 1984-11-30 1988-01-19 Security Dynamics Technologies, Inc. Method and apparatus for positively identifying an individual
JP3053527B2 (ja) * 1993-07-30 2000-06-19 インターナショナル・ビジネス・マシーンズ・コーポレイション パスワードを有効化する方法及び装置、パスワードを生成し且つ予備的に有効化する方法及び装置、認証コードを使用して資源のアクセスを制御する方法及び装置
PL178218B1 (pl) * 1994-10-27 2000-03-31 Ibm Sposób i urządzenie do bezpiecznej identyfikacji ruchomego użytkownika w sieci komunikacyjnej
US5737421A (en) * 1996-03-22 1998-04-07 Activcard System for controlling access to a function having clock synchronization
CN1142653C (zh) * 2000-04-28 2004-03-17 杨宏伟 动态口令认证系统及方法

Also Published As

Publication number Publication date
RU2275747C2 (ru) 2006-04-27
US20040030892A1 (en) 2004-02-12
AU2002221431A1 (en) 2002-04-02
CA2422051A1 (en) 2003-03-12
JP2004509424A (ja) 2004-03-25
AU2001272312A1 (en) 2002-04-02
EP1326364A4 (en) 2006-01-25
EP1326364A1 (en) 2003-07-09
WO2002025860A1 (en) 2002-03-28
KR20030051648A (ko) 2003-06-25

Similar Documents

Publication Publication Date Title
JP4619119B2 (ja) 電子装置への個人身分証明書のセキュアな登録およびバックアップのための方法
KR101054970B1 (ko) 개인 정보를 포함하는 전자 증명서를 이용하여 통신 상대를 인증하기 위한 시스템, 장치, 방법, 및 컴퓨터 판독 가능한 기록 매체
KR101874721B1 (ko) 신분 인증 시스템, 장치, 방법 및 신분 인증 요청 장치
US8315395B2 (en) Nearly-stateless key escrow service
US7100048B1 (en) Encrypted internet and intranet communication device
US7499552B2 (en) Cipher method and system for verifying a decryption of an encrypted user data key
US20100005318A1 (en) Process for securing data in a storage unit
US6711553B1 (en) Method and apparatus for digital content copy protection
KR20070095908A (ko) 컴퓨터 프로그램을 인증하기 위한 방법 및 디바이스
JP3362780B2 (ja) 通信システムにおける認証方法、センタ装置、認証プログラムを記録した記録媒体
CN103237010B (zh) 以加密方式提供数字内容的服务器端
US7620187B1 (en) Method and apparatus for ad hoc cryptographic key transfer
WO2012053886A1 (en) A method and system for file encryption and decryption in a server
CN103237011B (zh) 数字内容加密传送方法以及服务器端
CN110188545B (zh) 一种基于链式数据库的数据加密方法及装置
ATE506797T1 (de) Datenauthentifizierungsverfahren und agent basiertes system
JP4105583B2 (ja) 無線タグセキュリティ拡張方法，ｉｄ管理コンピュータ装置，代理サーバ装置，それらのプログラムおよびそれらのプログラムの記録媒体
CA2553081A1 (en) A method for binding a security element to a mobile device
WO2002023970A2 (fr) Procede d'identification totalement dynamique sans identificateur
JP2002374240A5 (zh)
KR20090024482A (ko) 컨텐츠를 이용하기 위한 키 관리 시스템 및 그 방법
KR20080093331A (ko) 인증 방법 및 그 장치
JP2004140715A (ja) 電子文書管理方法及びシステム
WO2006073250A3 (en) Authentication method, encryption method, decryption method, cryptographic system and recording medium
WO2009153846A1 (ja) 認証システム、登録装置および認証装置

Legal Events

Date Code Title Description
AK Designated states

Kind code of ref document: A2

Designated state(s): AE AG AL AM AT AU AZ BA BB BG BR BY BZ CA CH CO CR CU CZ DE DK DM DZ EE ES FI GB GD GE GH GM HR HU ID IL IN IS JP KE KG KP KR KZ LC LK LR LS LT LU LV MA MD MG MK MN MW MX MZ NO NZ PL PT RO RU SD SE SG SI SK SL TJ TM TR TT TZ UA UG US UZ VN YU ZA ZW

AL Designated countries for regional patents

Kind code of ref document: A2

Designated state(s): GH GM KE LS MW MZ SD SL SZ TZ UG ZW AM AZ BY KG KZ MD RU TJ TM AT BE CH CY DE DK ES FI FR GB GR IE IT LU MC NL PT SE TR BF BJ CF CG CI CM GA GN GW ML MR NE SN TD TG

121 Ep: the epo has been informed by wipo that ep was designated in this application
REG Reference to national code

Ref country code: DE

Ref legal event code: 8642

122 Ep: pct application non-entry in european phase
NENP Non-entry into the national phase

Ref country code: JP