CN101030239A - Account management system and account management method with security function - Google Patents

Abstract

The invention discloses an account management system with a security function and an account management method. The account management system comprises an authentication unit, a certification unit, a portable communication device and an authentication device, wherein the certification unit generates a user password after receiving request information sent by the portable communication device and transmits the user password to the portable communication device and the authentication unit, and the user inputs the user password received by the portable communication device into the authentication device and cooperates with the use of a user account, so that the authentication device can pass through an authentication program of the authentication unit and achieve the aim of connecting with the authentication unit.

Description

Account management system and account management method with security function

technical field

The invention relates to an account management system and an account management method with a secret function, mainly through a user password transmitted by a certificate-issuing unit to prevent information leakage.

Background technique

With the continuous progress of society, various trading behaviors or management behaviors are also constantly evolving. The most common thing is that when people want to engage in trading or management activities, they only need to log in with a user account and user password representing their personal identity to obtain relevant control and management authority. For example, when the operator wants to perform relevant control and management authority, he can enter the user account and user password through the operation panel, and then he can successfully obtain the operation authority and manage relevant data.

The aforementioned management rights can be applied to national defense, online games and financial transactions, etc., and the behavior of logging in and operating through the correct user account and user password. For example, when using an automated teller machine (automated teller machine, ATM) to conduct financial transactions, the operator enters the user account and user password in the automatic teller machine to obtain operation authority and engage in financial transactions. Certainly, when an online game player wants to engage in online games or recharge his online game account, he can also obtain relevant permissions with a set of corresponding user accounts and pass information.

Figure 1 is a common account management system. The account management system includes an authentication device 111 and an authentication unit 13, wherein the authentication unit 13 includes a storage device 131, and stores a plurality of user passwords 133 and a plurality of user accounts 14 in the storage device 131, one of which The user account 14 can be defined as a connection user account 141 . Generally speaking, the connection user account 141 and the user password 133 are determined by the user in advance and stored in the storage device 131 of the authentication unit 13 . When the user wants to enter the authentication unit 13 and obtain the relevant authority, the authentication device 111 can input the predetermined connection user account 141 and the corresponding user password 133, and the connection user account 141 and the corresponding user password 133 will be connected through the authentication device 111. The user password 135 is sent to the authentication unit 13 . The authentication unit 13 will carry out an authentication procedure on the connection user account 141 and the user password 133 sent by the authentication device 111. After confirming that the information is correct, the user can obtain the relevant authority of the connection user account 141, for example, further Operation and management of related data.

Since the connection user account 141 and the user password 133 are regularly stored in the authentication unit 13, it is virtually possible for hackers to attack the authentication unit 13 and obtain the connection user account 141 and the corresponding user password 133. opportunities, thereby causing the rights of users to be compromised. The general certification unit 13 often requires the user to change the connection user account 141 and the user password 133 regularly or irregularly to prevent the impact caused by the outflow of data, but such a method is not good for the security of the data itself. There is a significant improvement. And with regard to the usage habit of most users, the regular change of user password 133 will bring unnecessary trouble to the user.

Contents of the invention

The main purpose of the present invention is to provide an account management system and an account management method with a security function, which mainly uses a different certification unit to generate a user password required for a connection user account, and use the connection User account and user password to log in to the authentication unit, so as to effectively control the account management system to prevent data loss caused by hacker intrusion.

The secondary purpose of the present invention is to provide a method of account management with a security function, wherein the user password is generated by the certification unit, and the account of the connected user is stored in the certification unit, so hackers must simultaneously invade the certification unit and It is possible for the issuing unit to pass the certification procedure of the certification unit, thereby improving the security of the account management system.

Another object of the present invention is to provide an account management method with a security function, wherein the certificate issuing unit will only generate the user password immediately after receiving the request message sent by the portable communication device, even if hackers intrude The certificate-issuing unit cannot obtain the user's password, which can effectively improve the confidentiality of the data.

Another object of the present invention is to provide an account management method with a security function, wherein the user password becomes invalid immediately after the authentication process is completed, even if a hacker obtains the user password, it cannot be used repeatedly, thereby protecting the user's rights .

Another object of the present invention is to provide an account management system with a security function, wherein the issuing unit, the authenticating unit, the authenticating device and the portable communication device are all provided with at least one codec, and the transmitted data can be Perform encryption and decryption to avoid data loss during data transmission and effectively improve the security of data transmission.

Another object of the present invention is to provide an account management system with a security function. The account management system includes a portable communication device. The portable communication device includes a data clearer, which can clear the user password within a certain period of time. Clear to prevent user password leakage.

Another object of the present invention is to provide an account management system with a security function, wherein the user password generated by the issuing unit has a certain time limit and expires after a specific time, so as to improve the security of the user account.

In order to achieve the above object, the present invention adopts the following technical solutions: the present invention provides a method for account management with a security function, the main steps of which include: sending a request message from a portable communication device to a certificate issuing unit; After receiving the request message, generate a user password; send the user password generated by the issuing unit to the portable communication device and the certification unit; enter the connection user account and the user password received by the portable communication device to the authentication device; the authentication device connects with the authentication unit and performs an authentication procedure.

Moreover, the present invention also provides an account management method with a confidentiality function, the main steps of which include: a certificate issuing unit generates a user password within a unit time interval; the user password generated by the certificate issuing unit is transmitted to a A portable communication device and an authentication unit; input a connected user account and a user password received by the portable communication device to the authentication device; the authentication device connects with the authentication unit and performs an authentication procedure.

The present invention also provides an account management method with a security function, the main steps of which include: a portable communication device generating a user password; sending the user password generated by the portable communication device to an authentication unit; inputting A connection user account and a user password generated by the portable communication device are sent to an authentication device; the authentication device connects with the authentication unit and performs an authentication procedure.

The present invention also provides an account management system with a security function, which mainly includes: an authentication unit, including a storage device for storing a plurality of user accounts, and defining one of the user accounts as a connection user account , and carry out an authentication procedure with the authentication unit; a certificate issuing unit is connected with the authentication unit through the first connection line, the certificate issuing unit includes a user password generator, and the user password generator will generate a request message according to a request message The user password corresponding to the connection user account, and the user password is transmitted to the certification unit through the first connection line; and a user terminal, which is connected to the certification unit through the second connection line, which includes a The authentication device and a portable communication device, the portable communication device is used to transmit the request information to the certificate issuing unit, so that the certificate issuing unit generates the user password, and transmits it to the portable communication device through the second connection line, the authentication device The authentication process will be performed by connecting with the authentication unit based on the user password and the connection user account.

The present invention also provides an account management system with a security function, which mainly includes: an authentication unit, including a storage device for storing a plurality of user accounts, and defining one of the user accounts as a connected user The account is to carry out an authentication program with the authentication unit; a certificate issuing unit is connected with the authentication unit through the first connection line, which includes a user password generator, and the user password generator will generate a and Connect the user password corresponding to the user account, and transmit the user password to the authentication unit through the first connection line; and a user terminal, connected to the certificate issuing unit through the second connection line, which includes an authentication device and A portable communication device, the issuing unit transmits the user password to the portable communication device through the second connection circuit, and the authentication device will connect with the authentication unit according to the user password and the connection user account to perform the authentication procedure .

The present invention also provides an account management system with a security function, which mainly includes: an authentication unit, including a storage device for storing a plurality of user accounts, and defining one of the user accounts as a connected user account, and an authentication procedure is carried out by the authentication unit; and a user terminal, which is connected with the certification unit, and includes an authentication device and a portable communication device, wherein the portable communication device includes a user password Generator, and use the user password generator to generate a user password corresponding to the connection user account, and then send the user password to the authentication device, the authentication device will use the user password and the connection user account to authenticate The unit is wired for the authentication process.

Description of drawings

Figure 1 is a schematic diagram of the system connection of a common account management system;

Fig. 2 is a schematic diagram of the system connection of a preferred embodiment of the account management system with a security function in the present invention;

Fig. 3 is a flowchart of a preferred embodiment of the account management method of the present invention;

Fig. 4 is a schematic diagram of the system connection of another embodiment of the account management system of the present invention;

Fig. 5 is a flowchart of another embodiment of the account management method of the present invention;

Fig. 6 is a schematic diagram of system connection in another embodiment of the account management system of the present invention;

Fig. 7 is a flowchart of another embodiment of the account management method of the present invention;

Fig. 8 is a schematic diagram of system connection of another embodiment of the account management system of the present invention.

Detailed ways

First, see Figures 2 and 3. Fig. 2 and Fig. 3 are the system connection schematic diagram and the account management method flowchart of the account management system with security function of the present invention respectively. As shown in the figure, the account management system 20 includes an authentication unit 23 , a certificate issuing unit 25 and a client terminal 21 , wherein the client terminal 21 includes an authentication device 211 and a portable communication device 22 . The issuing unit 25 is connected with the certification unit 23 through the first connection line 261, and is connected with the portable communication device 22 through the second connection line 263, so that the certification unit 25, the portable communication device 22 and the certification unit 23, the authentication device 211 is connected to the authentication unit 23 through the third connection line 265, and the first connection line 261, the second connection line 263 and the third connection line 265 can all be a wired or wireless transmission line.

The authentication unit 23 includes a storage device 231 , and the storage device 231 stores a plurality of user accounts 24 and/or at least one user password 253 for the purpose of the authentication unit 23 performing an authentication procedure. The issuing unit 25 includes a user password generator 251, and uses the user password generator 251 to generate a user password 253, and then transmits the user password 253.

The account management method of the present invention is as follows, please refer to Fig. 2 and Fig. 3 at the same time, in the embodiment of the present invention, the generation of the user password 253 of the issuing unit 25 is mainly triggered by the portable communication device 22, and the user A request signal (not shown) is generated by the portable communication device 22 , and the request information is sent to the certificate issuing unit 25 via the second connection line 263 , as shown in step 31 . After receiving the request message, the user password generator 251 of the issuing unit 25 will identify the portable communication device 22 and generate a corresponding user password 253 , as shown in step 33 .

After the user password generator 251 finishes generating the user password 253, the issuing unit 25 will transmit the user password 253 to the portable communication device 22 through the second connection line 263, and transfer the user password 253 from the second connection line 263 to the portable communication device 22. A connection line 261 is sent to the authentication unit 23, as shown in step 35. For example, when the portable communication device 22 is a mobile phone, the issuing unit 25 can identify the number of the mobile phone or the SIM card number to transmit the user password 253 corresponding to the portable communication device 22 .

After receiving the user password 253, the authentication unit 23 will store the user password 253 in the internal storage device 231 of the authentication unit 23, and the user password 253 corresponds to a connection that was originally stored in the storage device 231. or account 241, for example, a plurality of user accounts 24 are stored in the storage device 231, and among the plurality of user accounts 24, one of the user accounts can be defined as a connection user account 241, the connection uses The user account 241 corresponds to the user password 253. In other words, the user must enter the corresponding online user account 241 and user password 253 to pass the authentication procedure of the authentication unit 23 and further obtain subsequent data management. and usage rights.

After the user password 253 is sent back to the portable communication device 22 , it will be temporarily stored on the portable communication device 22 , and the user will know the user password 253 through the portable communication device 22 . For example, the portable communication device 22 can be a mobile phone or a personal digital assistant (Personal Digital Assistant, PDA), and the authentication device 211 can be selected as an automatic teller machine, a computer, a keyboard and other devices with input functions. The user can input the user password 253 received by the portable communication device 22 and the connection user account 241 corresponding to the user password 253 into the authentication device 211 , as shown in step 37 .

The authentication device 21 will be connected with the authentication unit 23 through the third connection line 265, and the authentication procedure will be performed by the authentication unit 23, and the connected user account 241 and the user password 253 will be transmitted to the authentication unit in a wireless or wired manner 23. After the authentication unit 23 receives the connection user account 241 and user password 253 sent by the authentication device 211, it will further compare with the connection user account 241 and user password 253 stored in the storage device 231. Yes, and perform an authentication procedure on the connection user account 241 and user password 253 sent by the authentication device 211 , such as comparing whether the data are the same, as shown in step 39 . In this way, the user can enter and pass the authentication procedure of the authentication unit 23 through the acquisition of the user password 253 and cooperate with the connection user account 241 originally memorized by the user.

When using the authentication unit 23 to perform the authentication procedure, the connection user account 241 must be matched with a specific user password 253 to pass the authentication procedure. For example, the connection user account 241 corresponds to the user password 253 . However, in the embodiment of the present invention, the user password 253 and the connection user account 241 are not always stored on the same device. Therefore, the hacker must invade the authentication unit 23 and the portable communication device 22 at the same time to obtain the user password 253 and the connection user account 241, thereby effectively preventing the hacker from passing through the authentication procedure of the authentication unit 23.

Moreover, the user password generator 251 of the certificate issuing unit 25 will generate the user password 253 after the portable communication device 22 sends the request message to the certificate issuing unit 25 . That is, the authentication unit 23 , the certificate issuing unit 25 , the authentication device 211 and the portable communication device 22 do not always store the user password 253 . Only after the portable communication device 22 sends the required request information, the user password generator 251 will generate the user password 253, and transmit the generated user password 253, therefore, even if hackers invade the sending The certification unit 25 also cannot obtain the user password 253 smoothly.

In the embodiment of the present invention, the user password 253 is a user password 253 that can only be used once, and makes the user password 253 invalid after the authentication procedure is completed. In other words, the user password 253 is generated after the user operates the portable communication device 22 , and enters the connection user account 241 and the user password 253 into the authentication device 211 to pass the authentication procedure of the authentication unit 23 and becomes invalid. In this way, hackers are prevented from obtaining the user password 253, thereby obtaining the access authority of the connection user account 241, even if the hacker obtains the connection user account 241 and the corresponding user password 253 by skimming transmission data, The data recorded by it cannot be used. In addition, during the authentication process, the authentication unit 23 only allows the same set of online user accounts 241 and corresponding user passwords 253 to log in at the same time, so as to improve the security of the account management system 20 .

The foregoing system can be used in a variety of system architectures that require a user account 24 to gain access. For example: the authentication unit 23 (i.e. the server) of the online game can store a plurality of user accounts 24 in advance, when the user (i.e. the player) wants to log in the game interface with one of the online user account 241 to obtain the game authority or When storing value, it is necessary to connect the issuing unit 25 via the portable communication device 22 (such as a mobile phone), and send a request request message to the issuing unit 25. At this time, the user password generator 251 of the issuing unit 25 A user password 253 corresponding to the user account will be generated, and the user password 253 will be sent to the portable communication device 22 and the authentication unit 23 respectively. After receiving the user password 253, the user can enter the connection user account 241 and the user password 253 in the authentication device 211 (for example: a computer), and connect with the authentication unit 23 to perform the authentication procedure.

In addition, various financial transactions or account management can also be performed using the structure of the account management system 20 described above. The authentication unit 23 (that is, the server) of the financial company stores a plurality of user accounts 24 . When the user intends to connect with one of the online user accounts 241 to complete subsequent financial transactions or account management, he needs to connect to the issuing unit 25 through a portable communication device 22 (such as a mobile phone), and send The user code generator 251 of the certificate unit 25 sends a request. At this time, the user password generator 251 will generate the user password 253 and transmit the user password 253 to the portable communication device 22 and the authentication unit 23 respectively. After the user receives the user password 253, he can enter the connection user account 241 and the corresponding user password 253 at the authentication device 211, such as an automatic teller machine (automated teller machine, ATM) or a computer system, and authenticate Unit 23 is wired to pass the certification process.

Of course, the above-mentioned system can also be applied to the control and management of national defense secrets, or other various systems that need to divide the login authority through the connection user account 241 and the user password 253 , and will not be described in detail here.

The issuing unit 25 , the authenticating unit 23 , the portable communication device 22 and/or the authenticating device 211 all include at least one codec, and encrypt the user password 253 before transmission. For example, a codec 255 is provided on the issuing unit 25; a codec 235 is provided on the certification unit 23; a codec 215 is provided on the authentication device 211; a codec 225 is provided on the portable communication device 22 . The aforementioned codecs 215, 225, 235, and 255 are used to encrypt the transmitted data and decrypt the received data, so as to improve the security of the data during transmission.

The portable communication device 22 also includes a data clearer 221 for clearing the received user password 253 after the portable communication device 22 receives the user password 253 at an interval. In addition, the certificate issuing unit 25 can also set the clearance authority for the user password 253, and after the user password 253 is transmitted to the portable communication device 22, clear the user password 253 generated by the user password generator 251, of course The authentication unit 23 and the authentication device 211 can also be set to clear the user password 235 and/or the connection user account 241 after a time interval. For example, the clearing step is to clear the user password 253 of the portable communication device 22 and/or the issuing unit 25 after an interval, and also clear the authentication device 211 and/or the storage device after completing the authentication procedure. The stored user password 235 at 231 is cleared.

The user password 253 can also be set with a time limit, so that the user password 253 generated by the user password generator 251 becomes invalid after a certain period of time, so as to improve the security of the account management system 20 . The user password 253 can be selected as one of text data, numerical data, symbol data, sound data, video data and combinations thereof, and the combination of the user password 253 and the corresponding connection user account 241 will be able to pass the authentication The authentication procedure of unit 23 obtains the authority of relevant data control and management.

The above-mentioned user password generator 251 and data clearer 221 of the present invention can be selected as hardware components composed of electrical components or written by computer software. For example, the data clearer 221 inside the portable communication device 22 is It is programmed with JAVA language, so that the data clearer 221 has the above-mentioned functions. Also, when the account management system 20 is actually used, a plurality of different portable communication devices 22 will require the issuing unit 25 to generate different user passwords 253 in a short period of time, so the issuing unit 25 will be able to simultaneously A plurality of different user passwords 253 are generated and transmitted. And on the storage device 231 of authentication unit 23, also can store multiple different user passwords 253 and corresponding connection user accounts 241 at the same time, and carry out multiple user passwords 253 and connection user accounts 241 at the same time Certification program.

Please refer to FIG. 4 and FIG. 5 . FIG. 4 and FIG. 5 are respectively a schematic diagram of system connection and a flow chart of an account management method in another embodiment of the account management system of the present invention. As shown in the figure, the account management system 40 includes an authentication unit 23 , a certificate issuing unit 25 and a client terminal 41 , and the authentication procedure of the connected user account 241 and the user password 253 is performed through the authentication unit 23 .

The issuing unit 25 includes a user password generator 251 , and the user password generator 251 generates a user password 253 within a unit time interval, as shown in step 51 . After the user password 253 is generated, the certificate issuing unit 25 will send the user password 253 to the portable communication device 42 of the authentication unit 23 and the user terminal 41, as shown in step 53, for example, the user password of the certificate issuing unit 25 The generator 251 generates a new set of user passwords 253 every 24 hours, and the issuing unit 25 transmits the user passwords 253 to the portable communication device 42 and the authentication unit 23 .

After the portable communication device 42 receives the user password 253 , the user can input the connection user account 241 and the corresponding user password 253 to the authentication device 411 , as shown in step 55 . The authentication device 411 will connect with the authentication unit 23, and transmit the received connected user account 241 and user password 253 to the authentication unit 23, and the authentication unit 23 will perform an authentication procedure, as shown in step 57.

In actual application, the issuing unit 25 must transmit different user passwords 253 to different portable communication devices 42, for example, the first portable communication device 422... to the nth portable communication device 428 . Since different portable communication devices 42 have different codes, for example, when the portable communication device 422/.../428 is a mobile phone, the mobile phone number or SIM card number can be regarded as different The code of the mobile phone is used as the authentication basis for the issuing unit 25 to send different user passwords 253 to different portable communication devices 42 .

In addition, the encoding and decoding methods of the codecs 4252/.../4258 set in each portable communication device 422/.../428 are different, and each portable communication device 422/. The codecs 4252/.../4258 in ../428 are all corresponding to the codecs 255 in the issuing unit 25 to perform codec functions. For example: after joining the account management system 30 of the present invention, the user can obtain a personalized first codec 4252 and set the first codec 4252 in the first portable communication device 422 .

The codec 255 in the issuing unit 25 will perform different encryption actions on the user password 253 according to the different objects to be transmitted, and transmit the encrypted user password 253 to the corresponding portable communication device 422/.../428, for example, the codec 255 of the issuing unit 25 will encode the user password 253, and transmit the encoded user password 253 to the first portable communication device 422, and the second The first codec 4252 in a portable communication device 422 will perform the decoding action after receiving the user password 253, to restore the original data of the user password 253, thereby improving the security during data transmission, even if If a hacker obtains the user password 253 during transmission, or the issuing unit 25 makes an error during the transmission of the user password 253, the probability of leaking the user password 253 will also be due to the fact that the user password 253 has been encrypted. drop to lowest. Of course, the codec 4252/.../4258 set in the portable communication device 422/.../428 can be written by a hardware device or a software program, for example, it can be software written in JAVA language Codec 4252/.../4258.

Please refer to Figure 6 and Figure 7. Fig. 6 and Fig. 7 are schematic diagrams of system connection and method flow chart of the account management method of another embodiment of the account management system with security function according to the present invention. As shown in the figure, the account management system 60 mainly includes an authentication unit 23 and a user terminal 61, wherein the user terminal 61 includes an authentication device 611 and a portable communication device 62, and generates a usage information through the portable communication device 62. password 623 for subsequent authentication procedures.

When the user wants to operate the account management system 60, the operation of the portable communication device 62 is carried out. The device 621 generates a user password 623, as shown in step 71. Certainly, in another embodiment of the present invention, the user password 623 can also be determined by the user himself. In another embodiment of the present invention, before the user operates the user password generator 621 to generate the user password 623 , the user is required to input a related password to generate the user password 623 .

After the user password 623 is generated, the user password 623 can be transmitted from the portable communication device 62 to the authentication unit 23, so as to facilitate the authentication unit 23 to carry out subsequent authentication procedures, as shown in step 73 . The structures and functions of the authentication unit 23 and the user terminal 61 described in the embodiment of the present invention are substantially the same as those described in FIG. or password 623 , wherein the user password 623 corresponds to the connection user account 241 . In addition, when the portable communication device 62 transmits the user password 623 to the authentication unit 23, a code representing the portable communication device 62 can also be transmitted to the authentication unit 23, and the authentication unit 23 will verify the password of the portable communication device 623. The device 62 performs identification and further confirms the correctness of the user password 623 .

Of course, a codec 625 can also be added on the portable communication device 62 , and a corresponding codec 235 can be set on the authentication unit 23 . The data transmitted between the portable communication device 62 and the authentication unit 23 is encrypted and decrypted by setting the codec 235 and 625 , for example, the user password 623 is encrypted and decrypted. In addition, the purpose of identifying the portable communication device 62 by the authentication unit 23 can also be achieved through the different coding methods of the codecs 235 and 625. For example, for different portable communication devices 62, the user password 623 The methods other than encryption are different, so that the authentication unit 23 can achieve the purpose of identifying the portable communication device 62 according to the different encoding methods of the user password 623 .

After the user generates the user password 623 in the portable communication device 62, the user password 623 displayed on the portable communication device 62 and the connected user account 241 stored in memory can be input into the authentication device 611, as shown in step 75. Show. The authentication device 611 will further transmit the input connection user account 241 and the corresponding user password 623 to the authentication unit 23, and the authentication unit 23 will carry out an authentication procedure after receiving the connection user account 241 and the user password 623 , as shown in step 77. Of course, the portable communication device 62 can also optionally be provided with a data clearer 627, which is used to delete the user password generated by the user password generator 621 after the portable communication device 62 transmits the user password 623 to the authentication unit 23. Password 623 to clear.

Since the connection user account 241 must be matched with the corresponding user password 623, the authentication procedure of the authentication unit 23 can be passed, and all operations are completed immediately and within a short time. Therefore, even if hackers invade the authentication unit 23 and the portable communication device 62 at the same time, they may not be able to successfully obtain the user password 623 and the connection user account 241 . In addition, the user password 623 can be a user password 623 that can only be used once, and the step of encrypting during transmission will further ensure the security of the account management system 60 .

The account management system 60 described in the embodiment of the present invention can also optionally include a monitoring unit 67 for receiving the user password 623 generated by the portable communication device 62 . And the monitoring unit 67 includes a storage device 671, and uses the storage device 671 to store the user password 623 generated by the user password generator 621 and/or the corresponding connection user account 241, so as to check afterwards. The monitoring unit 67 includes a codec 675 to decrypt the encrypted user password 623 .

Please refer to FIG. 8 . FIG. 8 is a system connection diagram of another embodiment of an account management system with a security function according to the present invention. As shown in the figure, the difference between the account management system 80 of the present invention and the embodiment described in FIG. Send it to the authentication unit 23 to improve the security of the user password 623 transmission process.

The above description is only a preferred embodiment of the present invention, and is not used to limit the protection scope of the present invention. All equivalent changes and modifications based on the shape, structure, characteristics and spirit described in the patent scope of the present invention are all It should be included in the patent protection scope of the application for the present invention.

Claims (21)

1. An account management method with a confidentiality function, comprising the following steps: Sending a request signal to a certificate issuing unit from a portable communication device; The certificate issuing unit generates a user password after receiving the request information; transmit the user password generated by the issuing unit to the portable communication device and an authenticating unit; input a connection user account and the user password received by the portable communication device into the authentication device; The authentication device is connected with the authentication unit and performs an authentication procedure. 2. The account management method according to claim 1, wherein the user password corresponds to the online user account. 3. The account management method according to claim 1, characterized in that: the account management method further comprises a step of encrypting the user password before transmission. 4. The account management method according to claim 1, characterized in that: the account management method further comprises a clearing step: clearing the user password. 5. The account management method according to claim 1, wherein the user password will become invalid after the authentication procedure is completed. 6. An account management method with a confidentiality function, which includes the following main steps: A certificate issuing unit generates a user password within a unit time interval; transmit the user password generated by the issuing unit to a portable communication device and an authenticating unit; input a connection user account and the user password received by the portable communication device into the authentication device; The authentication device is connected with the authentication unit and performs an authentication procedure. 7. The account management method according to claim 6, characterized in that: the account management method further comprises a clearing step: clearing the user password. 8. The account management method according to claim 6, wherein the user password will become invalid after the authentication process is completed. 9. An account management method with a confidentiality function, which includes the following main steps: A portable communication device generates a user password; transmit the user password generated by the portable communication device to an authentication unit; inputting a connected user account and a user password generated by the portable communication device into an authentication device; The authentication device is connected with the authentication unit and performs an authentication procedure. 10. The account management method according to claim 9, characterized in that: the account management method further comprises a clearing step: clearing the user password. 11. The account management method according to claim 9, wherein the user password will become invalid after the authentication procedure is completed. 12. An account management system with confidentiality function, characterized in that: the account management system includes: An authentication unit, the authentication unit includes a storage device for storing a plurality of user accounts, and one of the user accounts is defined as a connection user account, and an authentication procedure is performed with the authentication unit; A certificate-issuing unit connected to the certification unit through a first connection line, the certificate-issuing unit includes a user password generator, and the user password generator will generate a password corresponding to the connection user account according to a request message and transmit the user password to the authentication unit via the first connection line; and A user terminal is connected to the certificate issuing unit through the second connection line, the user terminal includes an authentication device and a portable communication device, and the portable communication device is used to transmit request information to the certificate issuing unit, so that The certificate-issuing unit generates a user password and transmits it to the portable communication device through the second connection line. The authentication device will connect with the authentication unit according to the user password and the connection user account to perform the authentication procedure. 13. The account management system according to claim 12, wherein the user password can only be used once. 14. The account management system according to claim 12, wherein said portable communication device further comprises a data clearer for clearing user passwords. 15. The account management system according to claim 12, characterized in that: the account management system further includes at least one codec, and the codec can be selectively set in the certificate issuing unit, the certification unit, and the certification device , a portable communication device and one of its combined types. 16. The account management system according to claim 12, characterized in that: the certificate issuing unit transmits the user password generated by the user password generator to the portable communication device and the authentication unit User password cleared. 17. The account management system according to claim 12, wherein the authentication unit clears the user password stored in the storage device after a time interval. 18. An account management system with confidentiality function, characterized in that: the account management system includes: An authentication unit, the authentication unit includes a storage device for storing a plurality of user accounts, and one of the user accounts is defined as a connection user account, and an authentication procedure is performed with the authentication unit; A certificate-issuing unit is connected to the authentication unit through a first connection line, the certificate-issuing unit includes a user password generator, and the user password generator will generate a connection with the connected user within a unit time interval. the user password corresponding to the account, and transmit the user password to the authentication unit through the first connection line; and A user terminal is connected to the certificate issuing unit through the second connection circuit, the user terminal includes an authentication device and a portable communication device, and the certificate issuing unit transmits the user password to the portable communication device through the second connection circuit The authentication device connects with the authentication unit according to the user password and the connection user account to perform the authentication procedure. 19. An account management system with a confidential function, characterized in that: the account management system includes: An authentication unit, the authentication unit includes a storage device for storing a plurality of user accounts, and one of the user accounts is defined as a connection user account, and an authentication procedure is performed with the authentication unit; A user end, the user end is connected with the certificate issuing unit, and includes an authentication device and a portable communication device, wherein the portable communication device includes a user password generator, and the user password generator generates a The user password corresponding to the connection user account, and the user password is sent to the authentication device, and the authentication device will connect with the authentication unit according to the user password and the connection user account to perform the authentication procedure. 20. The account management system according to claim 19, characterized in that the account management system further comprises a monitoring unit connected with the portable communication device. 21. The account management system according to claim 19, wherein the portable communication device transmits the user password to the authentication unit through a monitoring device.

Images