TW201034423A - User authentication technology and system using one-time password composed of a repeatable first password and a non-repeatable password - Google Patents

Abstract

This invention relates to a user authentication technology and system using one-time password, where each one-time password that the user-end uses is a random number, and the verification value, corresponding to the one-time password, that the computer end uses is a hash number. In this invention, the log-in process includes a set of synchronized shifting procedure, and the user is allowed to log in only after both the one-time password for next time and the corresponding verification value on the computer end are generated.

Description

201034423 VI. Description of the Invention: [Technical Field] The technical field to which the present invention pertains can be classified into a computer user identification method, apparatus, and system, particularly related to a one-time password. User authentication technology. [Prior Art] User authentication refers to the process by which a computer system allows or denies a user to log in. Currently familiar to the general public is the use of a password method, which requires the user to register an identifier (a identifier) and a corresponding password (a corresponding password) on the computer system, and then, when used When the user requests to log in, the computer system determines whether to allow or deny the user's login according to whether the identification name entered by the user and the password are consistent with the registered person. In the terminology of the technical field of user authentication, "user authentication" also has the term "user authentication" in the literature. The device or device used by the user to log into the computer system is called a user terminal, a user terminal, a user terminal device, a user device, a client device, or a user workstation, etc.; the computer system being logged in is often referred to as a computer. Terminal, server, server, servo system, system workstation, computer system, or system side, etc., also referred to as the system. In addition, the "user identifier" also refers to the term "personal identification number (PIN)". In the user authentication using the passphrase, the system side does not record the user-registered 201034423 in plaintext form without encryption. The other record is that the passphrase is passed through a specific arithmetic transfer system. value. When the user wants to log in to the computer from the client device, the client device can convert the user's password with the same algorithm. The input of the Xia 1 user input is selected as the conversion pass password must have the following three = (1) given - one input value, to calculate the output value of this expression / easy '(2) given An output value 'to find an input value such that the output value calculated by this expression is equal to the given output value is not difficult and (3) collision resistance characteristics, © ', ~, meaning is It is very difficult to find two different input values to make this expression output the same result. This will not happen if two different passcodes are converted to the same value, and the converted value will not reveal clues about guessing the passphrase. There are many published expressions that meet these conditions, including the one-way hash function (Qneway ^ function) or the "safe hash function (like (10) functi〇n)", which is simply referred to as a hash function, such as MD5, SHA_256, SHA 384 and SHA_ 512 and so on. The output value of the hash function is also called the hash value. (© The above-mentioned user authentication using the passphrase has been implemented on the early UNIX system, but such a system cannot prevent the "re-attack" attack. You can record the message sent by the client, and then use the same message to log in to the computer system. To prevent this type of attack, you can use the "challenge and response" procedure as explained below. Recorded on the system-side persistent memory media is a 201034423 user identification name and from his passphrase _

A hash value obtained after the number. The so-called "challenge and response = f疋 and the system side use - a random number to generate _" challenge message and require the client to use this challenge message and correct password entry The correct response message, the typical steps are as follows: the user enters his password in the user device, and calculates a hash value by a one-way hash function agreed with the system to send a message requesting login to the computer system. The computer system generates a random random number (rand〇m curry and passes it to the client device as a - challenge message; after receiving the challenge message, the client device uses the calculated hash value as _ to receive the encryption key The challenge message is encrypted. The encrypted message becomes a response message and is sent back to the computer system along with the user identification name. After receiving the response message, the computer system uses the received user identification name as the index, and the persistent memory. The media reads out a recorded hash value as a decryption key, and decrypts the received response message; If the result of the decryption matches the challenge message generated by the computer system, the user is allowed to log in instead the user's login is rejected. In this program, the hash value recorded on the system side is also called the verification value (verifier or Verification value)". Even if the "challenge and response" procedure is combined, the user's password can still be cracked. The methods that attackers can use to crack passwords include dictionary attack, guessing, and exploitation. Trojan horses programs to eavesdrop or side-by-side attacks, etc. Therefore, various techniques have been exposed in the field of information security to overcome the above weaknesses in 201034423; the main technologies can be divided into three categories: (1) Using the identification of the user's biometrics, (2) verifying the identification of the user's digital signature with the public key, and (3) identifying the single passphrase. The so-called "single pass password" is the English term for One-Time. Password, also known as 〇ne_Time Passc〇de 'abbreviated as OTP', its meaning and the password recognized by the average person (Password) is different. The password that the average person knows is usually the password determined by the user. It has the meaning of the user's cognition, and the user usually uses it for a period of time and then replaces it. It is not limited to single use. The “single pass password” is mainly to emphasize that the passcode is limited to single use. The concept of passcode limited to single use is first seen in the “Password Authentication with Insecure Communication” paper published by Leslie Lamport in 1981. Note that if the passcode is limited to single use, you must have the ability to pass the password for the next and subsequent user logins, and the used passphrase will be verified as incorrect after the user logs in. . Suppose X, X2.....XN represents N sequential pass passwords, Y!, Y2.....ΥΝ represents the system-side verification value of the single pass password in sequence, if j is If a positive integer is not equal to i, then Xj and Xi should not be the same, and if k is a positive integer less than i, it should be very difficult to derive Xi from Xk, and it should be very difficult to derive Xi from Yi. Here, i, j, and k are all positive integers greater than or equal to 1 and less than or equal to N. If the user is required to remember a series of single pass passwords in sequence, it is obviously difficult, and if the computer system has to record multiple verification values, it is not good. 201034423 The method proposed by LamP〇rt in its paper can make the user Just remember to pass a password to calculate a series of single pass passwords, and the computer system must record a system-side verification value. The core of this method is to use a one-way hash function to calculate a series of single pass passwords and a corresponding one column system side verification value, as explained below. (Note: Lamp (the paper uses a one-way function, in addition to the output value of its function can not be repeated; in other words, the one-way hash function derogated from the month j text can satisfy its condition.) Suppose F is a one-way The hash function 'and assumes that pwd is the user-selected - a pass gamma, N is a positive integer, such as n = i_, then the single pass password defined by famport is ρΝ, 句句, pN_ i • • 'F(Pwd), Pwd, and the verification values corresponding to the system side are FN(Pwd), FN-1(Pwd), F2(pwd), Fl(pwd). When the user logs in as the first person When (1==1, or 2'.' or N), the client device receives the passphrase Pwd of the user N to calculate the passcode for the i-th use, that is, FN1 (Pwd), together with a user identification. The name is transmitted to the computer system; the computer system uses the received user identification name as an index, and the corresponding verification value Yi is read from the persistent recording medium, at this time Yi=FN.i+1 (Pwd), and then the computer The system uses the connected (four) single pass Mima as the wheel to perform the calculation of the one-way hash function-time, and compares the calculated result with the reading. The verification, are equal 'equal, if the board allow a user person to access and verify the value of the password system side views Alternatively received earlier, if not equal, so that refuse to sign the wearer.

Lamport further stated in his paper that the method has a robust feature, and the poem handles the state of the user (4). 201034423 Assume that the single pass password transmitted by the client to the system is the password Xj used for the jth, and the verification value used for verification by the system is the kth verification value Yk. When the client synchronizes with the system, then j =k, if the communication fails or the system is down, the user and the system may not be synchronized, at this time j妾k; if j>k then Fj-k+1(Xj)=Yk, if j< k, so you can use this two-element to check for this out-of-synchronization. If this out-of-sync condition is checked, the system can skip the number of unused verification values or cause the client to skip several unused one-pass passwords to achieve synchronization.

Based on the Lamport approach, Neil M. Haller developed a single pass password user authentication system called S/Key. This system is implemented in a UNIX system environment and is defined as the system specification for RFC 1760 (titled The S/KEY One-Time Password System) and RFC 2289 (titled A One-Time Password System). See also Haller. The paper "The S/KEY One-Time Password System" published in 1994. S/Key further expands Lamport's approach by allowing users to choose their passphrase autonomously to generate different series of single passphrases, and each pass of a single passphrase is used to log into a computer system, indicating as follows. Suppose a user can use multiple computer systems. His autonomously selected passphrase is represented by the symbol Pwd. This is the secret that only he knows, and each computer system he can use generates and stores a seed ( Seed ), then he used to log in to this computer system a series of single pass 201034423 password is FN-] (C (Pwd, seed)), FN-2 (c (pwd, se_.....

FkdVd, seed)), c(Pwd, seed); where f is a one-way hash function, N is a suitable positive integer, and @c t combines a passphrase with a seed function. S/Key does not record this series of single pass-through passwords on the user side. Instead, the user-provided W is used to calculate the single pass-through password required for the login. The sample steps are as follows: : When the user logs into the computer system, the user device is used to transmit the user identification name to the computer system, and the N, i and seed returned by the computer system are received to calculate a single pass. The password #卿叫(四)))) is transmitted to the computer system of the department; and when the computer system receives the single pass password, the calculation of the one-way hash function is performed once with the received single pass password as input. And comparing the calculated result with the system-side verification value Fn-...(c(Pwd, (4))), if equal, the user is allowed to log in, and the verification value of the system end is replaced by the received one-pass password. The positive integer recorded on the system side is also updated by i+Ι; if not equal, the login of the p user is rejected. In the above example steps, the seed is stored on the computer system and transmitted to the client when the user requests login. This is not the same in different computer systems. It is not necessary to keep the secret because the single pass password F~ (C(Pwd, seed)) The calculation also requires the passphrase Pwd that only the user knows; N and i are also stored on the system side, N is a pre-selected positive integer, but different computer systems can There are different values of N, and i will be updated every time the user logs in. No (4) the computer may have different i values at the same time. When the updated i value is _, it means the 201034423 series The passphrase password has been completely used, and there must be a program to restart. This program has been used as a keyinit command in the S/Key. This command instructs the computer system to generate and store a new seed seed for transmission to the client device. The client device calculates FN(c(Pwd, seed) to transmit to the system, and commands the system to use the received FN(c(pwd, seed) as the initial verification value, and resets the recorded positive integer. i is .keyinit instruction while another function is to allow users to change the access code Pwd.

In the method of Lamport and the S/Key system implemented by Haller et al., there is a mechanism for checking whether the client and the system are synchronized, and the meaning of the synchronization between the client and the system, that is, the user uses the first one. A single pass password, the system side uses the 100th verification value to verify, and so on.

The synchronization mechanism in the Lamport method has its complexity, as explained below.

Assume that the single pass password transmitted by the client to the system is the password Xj of the jth month, and the verification value used by the system for verification is the kth verification bin Yk 'If the communication fails or the system is down, etc. The user terminal and the system end are not synchronized. At this time, >k, that is, j may be greater than or less than k; at this time, the continuous calculation of the one-way hash function must be performed with Xj as the input until the one-way oblique function The output is equal to the system-side verification value. If so, the β-synchronization phenomenon is j>k, and the number of consecutive calculations based on the one-way hash function is determined by the difference between the number of k and the k. Skip several unused verification values to achieve synchronization. It is also possible that - the straightforward execution of the one-way hash function of the four calculations - one time still does not get the output value equal to %, in this case, 〇k is the input to perform the continuous calculation of the one-way hash function again, until one-way The output of the hash function is equal to the result of & if so, then 10 201034423 ~ This phenomenon of non-synchronization is j<k, and the number of consecutive calculations based on the one-way hash function determines the difference between k and j. The client skips a number of unused one-pass passwords. During the above verification process, the system side may have to perform a continuous calculation of the one-way hash function several times, and the number of consecutive calculations is related to N. Obviously, the system side cannot determine the number of consecutive calculations of the one-way hash function, and if the value of N is too small, the user must change the password pwcj frequently, otherwise the password of the user may be repeated in a short period of time. The loss of the meaning of single use, if the value of N is too large, the calculations required to test the out of sync will tend to be complicated. Therefore, there is a need to develop a new one-pass password user authentication technique to simplify the verification of the synchronization between the client and the system and to make the synchronization process more efficient. In the technical field of single pass passwords, the RSA Security&S system is another representative system, and the synchronization of the client and system side is derived from the use of time. This system uses the time of the client clock to generate the e ± single pass password', and on the system side, it uses the time of the system side clock when the system receives the single pass password transmitted from the client to generate the corresponding verification value. . Assume that the time between the client clock and the system clock is synchronized, and that the transmission time is zero, the verification value generated by the system will be the same as the one-pass password generated by the user, that is, the user and the system are authenticated by the user. Synchronization in the operation of the system; but after two clocks are running for a period of time, there may be a phenomenon of lead or backwardness, and the transmission time is extremely short and will not be zero. The spirit of RSA's system lies in creating A special technique to allow the aforementioned two times to be within a reasonable difference. The system end of the system still accepts the single pass password generated by the client. This - tips, as explained below. This system sets the client to generate a new one-pass password every short period of time. 'This interval can be assumed to be 1 minute. On the system side, set a valid time interval, such as 2 minutes ahead and 2 minutes behind. For a reasonable time difference range; when the system receives a single passphrase from the client, five verification values can be calculated according to the time of the system clock and the time in the range of 2 minutes before and after. One of the five verification values matches the received one-pass password, allowing the user to log in, otherwise the user is denied login. When the system allows the user to log in, the time difference between the system-side clock and the client-side clock will be recorded on the basis of the system-side adjustment of the median time range of the system-side time range. RSA's 0TP system further considers the user's long-term synchronization time, so that the time allowed by the system can be lengthened. For example, the time range of the system can be extended. Clock, that is to say, the system provides 21 verification values for comparison. If none of the 21 _ verification values match the received one-pass password, the user's login is rejected. If the match is met, the client is required to provide a single pass password for the second comparison. If the second match is successful, the user is allowed to log in and adjust the recorded time difference. Otherwise, the user is rejected. Sign in. * In the technical field of OTP, synchronization between the client and the system is necessary. In the well-known OTP technology, such as the Lamp〇rt method and its extended 12 201034423 system, as well as the RSA system, feasible synchronization techniques have been proposed; however, these techniques have their complexity. The need for 〇τρ technology. The present invention proposes a new OTP technology whose purpose is to create simpler synchronization techniques. The basis of the present invention is derived from a specific user authentication method disclosed in the Republic of China Patent No. Π93529: "User authentication method and storage medium for linking secrets and personalized secrets generated by random machines". The method disclosed in this Republic of China patent will be described below. The core concept of this method is to use a strong secret (str〇ng secret) to replace the passphrase (passw〇rd) used in the challenge and response process. The password chosen by the average person is considered to be a weak secret (weak 8 is because it may be cracked by a guessing attack or a dictionary attack, and a random number with a sufficient bit length is very difficult to be guessed, so it can be considered strong Secret. This method replaces the hash value of the passphrase with the hash value of the random number as the verification value used by the system, and the user terminal calculates the pass B code entered by the user and the pre-stored (4) account secret. The random number is used in the same way as the traditional password system; as for the user's login to the computer system, the communication mechanism between the client and the system is the same as the challenge and response process. Further explanation is as follows. In the initial procedure, the user Use the user-side farm to generate a random number (rand〇m) as the authentication secret, and store the hash value of the secret in the persistent memory of the computer system; the secret and its hash value It will not be stored on the client side, and the authentication secret will be divided into two parts: "User-side secret (user-side secret 13 201034) 423)" and the user-selected passphrase", where the "users" have "users"

The hash value is the same as the hash value stored in the computer system, allowing the user to log in. Otherwise, the user's login is denied. The judgment that the two hash values are equal is performed using the challenge and response procedures. ^ The concept of the previous paragraph assumes that there is a computer system and that there are multiple users in the computer system. It is assumed that each user can have his user device, and he can have his password and his client. Secret; on the computer system side, in addition to storing the hash value of each user's authentication secret, a corresponding identification name of each user is stored correspondingly, in other words, the system-side persistent memory medium has a The file or database stores multiple pairs of user identification names and hash values. 1A and 1B are flow diagrams of an embodiment of an initial procedure of the method and a procedure for a user to log into a computer system. The initial program is also the program that the user registers with the computer system. Refer to Figure 1A. In step 1110, the user device receives a user identification name 1102 and a passphrase 1104; in step 1120, the user device generates a random random number as an authentication secret; 14 201034423 In step 1130, the user device Calculating the hash value of the authentication secret; 1102, in step Μ0, the user device transmits the user identification name and the calculated hash value to the computer system; in step 1150, the computer system receives the The hash value and the identification name 1102 are stored in its readable persistent storage medium 丨J 〇9 φ. In step 1160, the computer system transmits a confirmation message to the user device; in step 1170, the use After receiving the confirmation message transmitted by the computer system, the device calculates the user secret by using the password of the user input password 1104 and the authentication secret generated in step 1120 as two inputs of a split operation type. The first operation is expressed as: user secret = split operation (password password, secret identification); in step 1180, the It is calculated by means of the user terminal 1108 stores a secret cipher square persistent storage medium may be readable 11〇6 thereto. The persistent storage medium of step 1180 of the registration process may be a portable persistent storage medium provided by the user, such as a USB flash drive, to store his client secret. In this way, the user can carry his memory medium to another user device to request to log in to the computer system; here, assume that the user device has installed the arithmetic expression required to perform the user authentication method' or These expressions are executed through the web interface. The procedure for a user to log in to a computer system using a user device includes the steps shown in FIG. 1B, as explained below. 15 201034423 In step 1205, the user device receives a user identification name input 1202 and a passphrase input 12〇4; in step 1210, the user device reads a user on the persistent storage medium 1206. The terminal device 12〇8; in step 1215, the user device calculates a value by using the received passcode input 1204 and the read client secret 12〇8 as two inputs of a reply expression. This operation is expressed as: the value - the reply expression (password input, the client secret); in step 1220, the user device calculates a hash @ value of the value; in step 1225, the user device Sending a message requesting login to the computer system; in step 1230, after receiving the message requested by the user device, the computer system generates a random random number as a challenge message; in step 123 5, the department The computer system transmits the challenge message to the user device; in step 1240, the user device receives the challenge from the computer system. After the message, the hash value calculated in step 1220 is used as an encryption key to encrypt the received challenge message to obtain a response message. In step 1245, the user device transmits the response message and the use message. The input identification name 1202 is given to the computer system of the department. In step 1250, the computer system reads the corresponding user identification name 1202 as an index, and reads the corresponding system 16 201034423 end hash value from the persistent storage medium; in the step measurement, the computer system of the department The value of the read is a decryption key, and the received response message is decrypted, and a restored challenge message is obtained;

In the step mo, the computer system's message is consistent with the challenge message generated in step 1230. If the message is transmitted, the message is allowed to be sent to the user device, and a message to reject the login is sent. The user device; the coincidence is transmitted in step mo, the user device receives the permission transmitted by the computer system or (4) the person looking for a message, and if the message is rejected (4), the process returns to step 1205. Re-execute this procedure. Both the return expression of the step 1215 of the login program and the split expression of the registration program 1170 must be mutually compatible expressions. The meaning of the so-called mutual cooperation means: using the splitting expression, one to identify the secret; to be replaced by a passphrase and - (4) the secret of the account; using the combined reply expression 'only the correct passphrase and the secret of the user side Can reply to the original identification secret. The segmentation expression and its associated reply expression should be satisfied (4) and its design is described in the article "Wuhua (4) special (4) i255 (2), entitled "Method and system for protecting digital secrets". The following is one of the feasible settings for the splitting expression and the matching reply expression. The formula of the split expression is set: client secret = (hash (password) + αχ secret) m〇dq, where hash is a one-way hash function, q is __ is greater than the identification secret 17 201034423 The integer constant of all numerical examples of the password, a positive integer 'with q' and the parameters α and q do not need to be kept secret. The formula of the matching reply expression is: Identification secret = (A client secret + ((-(a-ixhash)) m〇dq)) mod q where hash, q and α are the same The definition of the splitting expression, a "is the multiplicative inverse element of the modulo operation of α in mod q. The user authentication method described above, that is, the method of identifying the passphrase of the weak secret 以 with a strong secret, which additionally includes A set of procedures for "changing client secrets and computer system side verification values". This program allows the user to update the system-side hash value without changing its passphrase, and correspondingly update the client secret stored on the portable persistent media. This procedure includes the steps shown in Figure 1C, as explained below. In the program 1305, a user device and a computer system perform a login procedure as shown in FIG. 1B, which is re-described as follows: the user device receives an input of a user identification name 13〇2 and a password input 13 1304, and then reads the client secret 1308' on the persistent storage medium 13〇6 to calculate a value by replying the expression and then calculating the hash value of the value, and then the program of the challenge and response is determined by the computer system. Whether the login is allowed, the computer system returns a message to the user device that allows login or refuses to log in; in step 1310, the user device judges the received message, and the right receives the message that the login is refused. , the program 18 201034423 305 can be re-executed to log in again to the computer system 'If the message is allowed to log in, then step 1315 is continued; in step 1315, the user device generates a random random number as a new one. Identifying the secret; in step 1320, the user device calculates a hash value of the generated new authentication secret; in step 1325 The user device uses the hash value of the value as

Adding a fee to the hash value of the calculated new authentication secret to obtain a new encrypted secret hash value; in step 1330, the user device transmits a new secret secret hash value. ,. If the user and the user's identification name are input to the department; in step 134G, the computer system reads the original record from the persistent memory medium according to the received user identification number 13〇2. The system-side hash value; in step 1345, the value is used as a decryption key, and the result is decrypted, and the secret hash value is not used; the computer system receives the new authentication secret by the system-side hash that is read. The hash value is used to restore the new authentication generated by the user device in step 135. The computer system replaces the I system end hash value with the restored new authentication secret pen: the value, and the restored new authentication secret. (4) ^ recorded in its persistent record (4), then transmitted - then the confirmation message is sent to the user device; in step 1360, 'the user device receives the message transmitted by the computer system 19 201034423' The new clock secret of the password input is the same as the division operation in the registration procedure = two input to calculate - a new client secret, this operation is expressed as • new client secret = segmentation Formula (password, a new clock not secret). In step U70, the user apparatus with the calculated new secret measuring its persistent memory media age ^ dove, substituted densely 1308. The segmentation expression of step 117〇 of the 升 叭 § 主 master book program is the same arithmetic expression. Therefore, when the user re-enters the computer system after updating the system end-spot value, the pass-through password and the updated user-side secret are the values obtained by the input type of the reply expression, and the hash value will be updated after the update. The system side hash values are equal. The foregoing user authentication method includes "other programs" in addition to the three sets of programs already described. Since these programs are not directly related to the present invention, they will not be described again. The client device for executing the program included in the user authentication method requires an arithmetic expression other than the segmentation expression in the patent document of the user authentication method and its matching reply expression, and includes a random A random number generator or a virtual random random number generator and a one-way hash function. The conditions of the one-way hash function have been detailed in the previous section, and there are many public expressions that meet these conditions, such as MD5, SHA-256, SHA-384, and SHA-512, etc.; and random random numbers and virtual There are many methods for generating random numbers. For detailed methods, see the books on cryptography, such as • Alfred J. Menezes, Paul C. van Oorschort, and Scott. A. 20 201034423

Vanstone, Handbook of Applied Cryptography, CRC Press, 1997, and John E. Hershey, Cryptography Demystified, McGraw-Hill, 2003. are described below. A true random number generator needs to have a source of its own randomness. There are several ways to use several hardware features, such as: W. Holman, J. Connelly, and A. Dowlatabadi, t4An Integrated Analog/Digital Random Noise Source,, J IEEE Transactions on Circuits and Systems-I: Fundamental Theory and Applications vol. 44, no. 6, pp. 521-528, June 1997. Software random number generators are also common. Software for designing a random number generator can be used to include system clock, elapsed time between keystrokes and mouse movements, system load and network statistics of the operating system. System programs such as operating system values such as system load and network statistics. A good software random number generator should use a variety of random sources to sample each source, and then combine the data sequences obtained by the sampling results using a complex mixing function; here, the available mixture Functions, which can be collision impedance hash functions such as MD5 and SHA-256. In many practical applications, a pseudorandom bit generator is usually used to replace a true random generator, replacing it with a virtual random number generated by a virtual random bit generator. Random random numbers. The virtual random bit generator is an output non-random deterministic algorithm. This algorithm passes 21 201034423 to give a true random binary sequence as input. We assume the input bit. The length of the metastring is m, and it is assumed that a random bit sequence of n»m length is output (n»m means that η is much larger than m), and the input of this algorithm is called seed. ANSI X9.17 and FIPS 186 are two standard methods for generating virtual random bits and random numbers. Other methods are to use a multiplicative congruence pseudorandom number generator (invention). The invention describes an innovative user authentication method for single pass passwords. In the method, each single pass password used by the user end is a random number generated by a random number generator or a pseudorandom number generator. The verification value corresponding to each single pass password used by the computer system is its hash value. The hash value of the early pass password is the output of a one-pass password conversion using a one-way hash function. According to the characteristics of the one-way hash function, it is very difficult to reverse the input value from its output value; therefore, it is very difficult to derive a single pass password from the verification value of the computer system side. This is one of the basic requirements for a single pass password user authentication method. Using the random number generated by the random number generator or the virtual random number generator as a single pass password' has the advantage that the random number of the bit length is sufficient as a strong secret, which is very difficult to be guessed, another benefit It is 22 201034423. Suppose that Pl, P2, ... represent a series of sequentially making Vi, V2, ... represent a series of single pass passwords that are sequentially restricted to the number of single random numbers, and the computer system side verification value of the pass password is Each of the & is a random number and each V is a hash value calculated by its corresponding Pi through a one-way hash function; and if j is a positive integer not equal to k then Pj and

Pk will be different, and deriving Pk from Pj or deriving from Pk is a very difficult basis. _ Sex is derived from the used single pass password.

Unused single pass passwords are not (four) difficult, which is one of the basic requirements for a single pass password. The method of the present invention does not generate a series of single pass passwords (i.e., a series of random numbers) pre-stored in the persistent memory medium, but uses a set of "synchronous shift programs" to generate τ in each login process. - The number of random numbers used in the login (that is, the next single pass password) and the verification value corresponding to the computer system. The method of the present invention does not store the random number used in the next login in the persistent memory medium. This random number is replaced by a first pass password and a second pass code. The __ passphrase here is determined by the user's autonomy - a pass-through mic, which can be memorized by the user, and the second passphrase is stored in the persistent memory medium. ^When the next login, the random number Calculated by a reply calculation formula, the reply calculation formula has two inputs, namely the aforementioned first pass password and the second pass password. - Replying to a calculation with a first passphrase and a second passphrase - a strong secret as a secret identification technique has been disclosed in the Republic of China Patent No. 1293529, and is described in the μ technology of this document (4). 201034423 The "first pass password" is the "first pass password for user passcode" as mentioned in the previous patent. It is the "user secret" mentioned in the previous patent. After performing the synchronous shift procedure, the user will have a new one-pass password, but this new one-pass password will not be stored in the persistent memory media' is stored in the persistent memory media is a new The second pass Mimma will be stored on the computer system - a new verification value is stored in the persistent memory medium; in other words, the full implementation of the synchronous shift program

After that, the second password of the user terminal and the verification value of the computer system will be replaced with new values. The first pass password of the user end may be determined by the user's autonomy. It may also be used repeatedly for multiple consecutive logins. If the second pass password is automatically read from the persistent recall media, it is not required to be used. (4) Into the user authentication system implemented according to the present invention, as if it is a conventional password system. The invention also contains a set of programs that allow the user to change the first pass password of the ... decision.

If the first pass password (4) is unchanged, the second pass (4) may be the early pass password (4) substitute value; under this assumption, the second pass password of the user terminal and the computer system end of the computer are used to synchronize the shift. It is an important part of the invention n ^ ^ The invention comprises two shifting procedures: the first and the second synchronous shifting process #牛牛: must ~ + the second program. The first type of the same program does not take into account the operation of the computer system and the operation of the corpse device, nor does it consider the possibility that the communication between the two may be interrupted; if the process of this process 24 201034423 is not complete The execution causes the user to be out of sync with the computer system. Then the user must re-execute the initial program to achieve synchronization between the computer system and the user. The design of the second synchronous shifting program has considered the operation of the computer system and the user equipment and the communication of the two may be interrupted. If the user terminal and the computer system are not synchronized due to the interruption, the user next time The additional "alternate synchronization program" will be executed when logging in; if the standby synchronization program is completely executed, the status of the user and the computer system will be corrected to be synchronized; if the standby synchronization program is not If it is executed completely, it is equivalent to the user's login failure. When logging in again, this backup synchronization program will still be executed. According to the user authentication method of the present invention, the user enters the computer system and includes a set of synchronous shifting procedures. Now that the synchronization shift program included is the third synchronization shift program, the user can log in to the computer system by following the steps below: one user transmits from a client device - then requests the login message to a Computer system; the user terminal uses the first pass password provided by the user and a second pass password read from a persistent memory medium to reply to calculate a green-person subscription (four) as The single pass password for the second time; the computer system reads from the β persistent memory media - the verification value of the mosquito pass is correct. If the single pass password is correct, then a set is executed. Synchronously shifting the program, and then transmitting a message allowing the login to the user; if the single money password is *correct, the (four) computer "transmits the message of rejecting the login to the client device. The synchronization shift procedure in the above steps , is the first type of synchronous shift program 25 201034423 Its power month b basically gets _ a new random number and updates the verification value of the computer system side and the second pass of the user side Code; the work of this update can take any of two possible sequences, and the generation of random numbers can be performed on the computer system side or on the user side. It is assumed in the synchronous shift program as 'down' The random number of the single pass password is generated on the device of the user side and assumes that the verification value of the computer system is updated first and the second pass password of the user end is updated. Specifically, the synchronization shift program can be According to the following steps: the computer system transmits - the synchronous transfer message is sent to the user device; the user device receives the message that the synchronization is changed, and generates a random number as the next single pass password. 'and calculate a hash value of the random number; the client device encrypts the hash value of the random number calculated by using the hash value of the current single pass password as an encryption key, and then encrypts The result is transmitted to the computer system; the computer system decrypts the received encryption result with a stored verification value as a decryption key, and restores the result. The hash value of the number is replaced by the hash value obtained by the restoration; the computer system transmits another message for performing the synchronization transition to the client device; the user device receives the message and receives the synchronization. After the message, a new second passphrase is calculated by the random number; the client device replaces the second passphrase used to calculate the single passphrase used for the login with the new second passcode. Then send a confirmation message to the computer system of the department; the computer system receives the confirmation message transmitted by the client device, and the synchronization shift program has been completely executed. The above steps may be interrupted due to the operation of the computer system and the user device. And 26 201034423

It has not been fully executed, and may not be completely executed due to communication interruption of the computer system and the client device. If these steps are not completely executed and the user side is not synchronized with the computer system side, the user must re-execute the initial program to regenerate an initial single pass password, thereby resetting the verification value of the computer system side and The second pass password of the user end re-initializes the synchronization between the user end and the computer system end. Here, the re-initialized single pass password is a new (four) number, and the original initial random number (ie, the original initial one-pass password) (4) has a very low probability and can be regarded as impossible; this feature is caused by chaos The design of the number generator. The system implemented according to the user authentication method including the first-type synchronous shift program is more simplified than the prior art single pass password system because the computer system uses only one verification value, and no need to have multiple verification values. To correct the situation when the face and the f cerebral palsy (4) are available. The method of identifying the second synchronization shift procedure as a step is described below. Using a verification value of the synchronous transfer system, the first type of synchronization pushes a single pass and assumes that the second pass password is updated. The function of the second synchronous shift program is basically the same as the first program: obtaining a new random number and updating the computer system. And use the third pass password of the phase. As with the embodiment of the shifting procedure described above, it is also assumed here that the random number as the τ cipher is generated on the device of the user side, the verification value of the brain system side is prior, and the user side of the user terminal is updated later. In the second synchronous shift procedure, we consider the situation in which the execution of the synchronous shift program may be interrupted and not completely executed, as explained below. 27 201034423 The system is the synchronization check program execution interrupt system in the computer system verification value and the user side 电脑 the computer system side situation is equal to the user login time code has not been replaced; this caused the login failure, also = to the computer crash or The impact of the communication interruption and the husband and wife of the money said that the user's current single pass password has not been used, and can still be used the next time you log in. Another situation is that the synchronous shift program execution interrupt occurs after the power 2 has changed the verification value. In this case, the verification value of the computer system side has been determined. It cannot be confirmed whether the second pass password of the user end can be divided into two according to the occurrence of the situation. It is possible that the second pass password of the first type may be =: has been replaced, and the second possibility is that the second pass H of the user end is replaced. Report 2 The user's second passphrase has been replaced, this situation has been 6-::: the second pass of the client and the computer system side verification value = replaced by the new value 'computer system side It is already synchronized with the user side.第 The system-side and #-use-side passwords are not replaced, the computer system ^ is not synchronized with the user; when the next-time user logs in, the user == the second pass is calculated. The secondary password cannot be incorrectly denied login. To be correct, the user is being computerized. The present invention incorporates a special technique to overcome the above-mentioned second situation: the extension of the program is not fully implemented, and the computer system may erroneously reject the user's login. The method is: the computer system traces the 28 201034423 1 When the user first-times the second person, the execution of the synchronous shift program is actually executed and the previous verification value is retained. In order to trace the previous m, the interruption did occur. 'Used a 'confirmed synchronization mark'. In order to retain the value of the previous test you used with the %#, it was additionally stored on the persistent memory of the computer system. _ "alternate verification value", and the original verification value is also called "this verification value". After the second synchronization shifting program is a step of t, the process of making the login power can be performed according to the following steps: one user uses a user terminal: a computer system, the client device Ye count: requesting the login message to a _ system to determine the pass password, correct; if the single pass password = indeed 'execute - (four) step shift program, then the computer system == login message to the user End device, if the single pass:: is incorrect, the computer system transmits a message rejecting the login to the client device. The computer system determines whether the single pass password is the user's next step: the computer system transmits a challenge message to the ~, the client device uses a one-way hash function to calculate the single pass The hash value of the code; the client device receives the challenge message, and the hash value is an encryption key to encrypt the challenge message to - π computer = then send the response message back to the computer system; The system: after receiving the response message, the system reads the verification value of the two persons from a persistent memory medium - decrypts the response message by the decryption key; if the decrypted message matches the original challenge message, The computer system of the department decided that the single pass password is correct; if the information does not match, then the message from the persistent record: the message and the original challenge message, if the record is read Confirm that the single pass password of the synchronization is incorrect: if the computer system determines, then the department (4) executes 4 "alternate; the record is unconfirmed from == backup step material includes the following steps: the computer system will record ^ (4) Read - (4) Verification value is expected to be another - decryption gold ❿ == message should be re-decrypted; if the message is re-decrypted and the original challenge message, "the computer system determines that the single-pass exhaustion is correct = cattle then The verification value is updated to the value of the certificate, and the confirmation synchronization flag is changed to confirmed; if the message after the line (4) is still consistent with the original selection, then the computer system determines that the single pass is brown. Returning to the process of logging in to the computer system by the user, after determining that the single pass password is correct, the second synchronous shifting program then performing the steps including: transmitting the computer system - then performing a synchronous shift message to the user device The client device generates a milk number and calculates its hash value, and the client device uses the hash value of the single pass password to encrypt the hash value of the random number. And then transmitting the result of the encryption to the computer system; the computer system synchronizes the confirmation: the flag is changed to unconfirmed; the computer system uses the current verification value - the decryption key is connected The encryption result is decrypted, the hash value of the random number is restored, and the standby verification value is replaced by the current verification value, and then the current verification value is replaced by the hash value of the random number obtained by the restoration; the computer system of the department Passing 30 201034423 to send another message to the client device; after receiving the message of the synchronization change, the client device calculates a new second password by using the random number; the client The device replaces the second passphrase for calculating the single pass password with the new second pass=password, and then transmits the confirmation message to the computer system; the department receives the J" _. After the hole is filled, the mark that confirms the synchronization is changed to confirmed 〇

According to the user authentication method including the second synchronous shifting program, the first step is more complicated than the user 3 method including the first synchronous shifting program, but still a single pass than the prior art. The post-code system is used to transmit the A, because the computer system only uses two verification values to correct the possible (four) steps of the user and the computer system. The described techniques or methods of extension thereof may be exploited by a computer software to be developed into an instruction set and stored in an object of a machine readable storage medium or stored in a machine coupled to one or more processors. Read in the memory device for performing authentication by the user. The invention further comprises an old P computer for the user to identify the _ 丨 叩 班 ^ 班 1 1j, the computer package read media and the instruction set of the media, the instruction set 7 . The P computer performs the following steps: receiving two messages from the __ client device to request the person to join; transmitting - then challenging the message to the client device; receiving the message from the client device; The current test value is used to calculate the response message to generate a result, and the comparison t-result is consistent with the challenge message; if the match is performed, the set-synchronization process is performed, and then the transfer 1 is allowed. The message of the person is sent to the client 31 201034423 device, if the right does not match, a mark for confirming the synchronization is obtained; if the flag of the tag is recorded as confirmed, a message for rejecting the login is transmitted to the client device; If the record of the tag is unconfirmed, then a set of alternate synchronization procedures is executed and then the message is sent or denied to the user device. The invention also includes an anarticle comprising a storage medium storing an executable set of instructions for causing a user 1 device to perform the following steps: transmitting - requesting a message to the person a computer system; receiving a challenge message from the computer system of the department; receiving: a first-password password input; a self-sustaining memory medium reading a second passphrase; The weight input, the read second pass=code and the received challenge message are generated—the response message is sent; the message is sent back to the computer system; and the received computer system receives a rejection=input The message, or receiving the message from the computer system, executes the same message; if it receives the message, the synchronization process is performed with the p computer system; the synchronization program is executed. After that, it was sent to the computer system of (4) - allowing login. :: The single pass password system implemented by the invention is described in detail below. Kenting's first, every single pass password used is a random number. ^The number of bits with sufficient length can be guessed as a strong secret. The other advantage is that the number of random numbers is not Moreover, it is very difficult to derive a single pass password that has not been used by the used single pass password. The verification value of the brain system end is the hash value of the single pass password, which is the characteristic of the output I according to the one-way hash function obtained by converting the single pass password with the early hash function, and the output value is reversed. Pushing the input value is very difficult; it is very difficult to derive a single pass password from the verification value on the computer system side. According to the user's clock system implemented in accordance with the present invention, if the first type of synchronous shifting program is included, the verification value used by the computer system side has only one 'if the second synchronous shifting program is included, the verification value used by the computer system side is only Two, the computer pure material needs to have multiple verification values to correct the situation that the user end and the computer system side may be out of sync; compared with the prior art single pass password system, the user end is not synchronized with the computer system end. The process of testing and synchronizing is more efficient. The first pass password τ of the user end is determined by the user's autonomy, and can also be used repeatedly for multiple consecutive logins. If the second pass password is automatically read from the persistent storage medium, the user is not required. The intervention, the user authentication system implemented in accordance with the present invention, appears to the user to be a conventional pass-through cryptosystem. Each time the user successfully logs into the computer system, the single pass password will be replaced with the new value, and the verification value of the computer system and the first pass password of the user will be replaced. Therefore, the attacker steals the obtained verification. The value and the second passphrase will lose meaning as the user re-enters the 33 201034423 into the computer system. Sixth, the key to the decision of the computer system to allow the user to log in is to have to provide a correct first pass password and a correct second pass password to generate the correct one pass password and only disclose the second pass password. Or in the case of the first pass password, it is difficult to guess the correct single pass password by the secret of half. The details and variations of the present invention are described in detail below with reference to the accompanying drawings, and the <RTIgt; </ RTI> <RTIgt; [Embodiment] The technical content of the Patent No. 1293529 of the Republic of China has been described in the prior art specification of this document, and the present invention is closely related to the patent. The user authentication method disclosed in the patent replaces the traditional password with a random number but creates a situation in which the user seems to be still using the traditional password system. The method is that the hash value of a random number is used as the verification value used by the computer system end, and at the user end, the password entered by the user and the user secret automatically read from the persistent memory medium are returned. Random number and ❹ calculate a hash value of it; when the computer system receives the message from the user requesting login, 'use the challenge and response mechanism to determine whether the hash value of the random number calculated by the user end matches the verification value of the computer system side. If it matches, login is allowed. If it does not match, login is refused. The patent also exposes a set of procedures for "changing client secrets and computer system side verification values", as shown in Figure 1C. This program is activated by the user according to the user's needs. It is not a part of the process of the user logging into the computer system. 201034423 'In other words' users can use the same one password and the same client secret to continue Log in to a computer system, or you can change the client secret and the verification value of the computer system after logging in to a computer system at the appropriate time. In this document, the "user-side secret" referred to in the previous patent is renamed as the first passphrase, and the "user's passphrase" is renamed as the "first passphrase."

The invention discloses an innovative single pass password system, one of its core concepts is to continue the use of a random number as a secret secret in the aforementioned patent, but the chaos is limited to a single use; for this, there must be a set of procedures. Consistently change the random number as (4) secret, the computer system side verification value generated by the random number, and the second pass (four) code generated by the random number. This program is called "synchronous shift program". The "synchronous shift program" is converted from the "change client secret and computer system side verification value program" of the aforementioned patent. This conversion is not obvious. 'Because of the synchronization technology used in the prior art single pass cryptosystem, there is no obvious logical relationship between the concept and the skill and the synchronous shift program of the present invention; and the present invention Into _ = two different synchronous shifting programs: the first type and the second type of synchronous shifting step loading! The design of the shifting program does not consider the computer system and the user's condition; if the process:: medium:, neither considers two The communication may be interrupted. If the user is completely out of sync with the computer system, the user must re-execute the initial program. Department 35 201034423 The design of the second synchronous shifting program has considered that the operation of the computer system and the user terminal device and the communication between the two may be interrupted, and if the user end is not synchronized with the computer system end, then The next time the user logs in, the "alternate synchronization program" will be executed. If the backup procedure is completely executed, the situation that the user side is not synchronized with the computer system will be corrected to be synchronized; If the synchronization program is not completely executed, it is equivalent to the user's login failure. This login synchronization program will still be executed when logging in again. According to the method of the present invention, the computer system must completely execute the synchronous transfer program to confirm that the user side and the computer system end change the random number as the authentication secret, the computer system side verification value generated by the random number, and The second passphrase generated by this random number is then allowed to be logged in by the user. Recalling the "Change Client Secret and Computer System Verification Value Program" of the aforementioned patents, the execution is performed by the user after the computer system allows the user to log in. In other words, the patented login program does not include a program for changing the client secret and the computer system side verification value. The login process of the present invention includes a synchronization shift program, which is not the same in concept and skill. The single pass password user authentication method of the present invention will be described below with two embodiments, and the two embodiments will be described with reference to Figs. 2 to 15 . When the explanatory text of this document uses the same number as the graphic, its number corresponds to the same or similar component or program. The first embodiment includes a set of "initial procedures", a set of "login and sync change procedures", and a set of "change first pass password procedures"; and "Xi 36 201034423" "Login and sync shift procedure". Package "The first type of synchronization process - the embodiment assumes that there are multiple users of the computer system. The initial purpose is to use a client device to generate a random number as a single pass. Peak, and stored in the computer system's persistent memory media, this initial material cut (four) shape - a value as a - initial

The initial verification value 'also God's name is the index of the initial verification value; and the single pass password that was used in the first place is divided into two parts. The "password" and an initial "second pass code" are the user's autonomous choice and self-memory, and the initial "second pass password" is The first passphrase and the two input (four)-outputs of the initial single-cut password formula are stored in a persistent storage medium readable by the user. The initial procedure described above is essentially the same as the initial procedure of the aforementioned patent (see Figure 1A). In conjunction with the words in (4) of this document, the initial procedure of Figure 2 is modified as shown in Figure 2, and the steps are as follows. In step 2110, the client device receives a user identification name 2102 and a first passphrase 21 〇4. In step 2120, the client device generates a random number as an initial one-pass password. In step 2130, the client device utilizes a one-way hash function to calculate a hash value for the initial one-pass password. In step 2140, the client device transmits the user identification name 37 201034423 2102 and the calculated hash value to a computer system. In step 2150, the computer system records the received hash value and the user identification name 21〇2 on the readable persistent medium 2002 as an initial verification value of the computer system 2〇〇4 and A user identification name 2〇〇6 for indexing the initial verification value 20〇4. In step 2160, the computer system transmits a confirmation message to the client device. In step 2170, the client device uses the first passphrase (5) and the initial one-pass password generated by the client computer system as the two inputs of the splitting expression after receiving the correct m transmitted by the computer system. To calculate an initial second passphrase 2108. This divisional expression is expressed as: • The initial second passphrase 21〇8 = the split expression (first passcode 2104, initial single passphrase). In step 2180, the client device stores the calculated initial first-pass code 2108 in a readable storage medium 21〇6.

After performing the initial procedure of the first embodiment with a computer system, the user can provide his first password 21 () 4 and the second password to a client device, and submit the user to the computer system. In response to the request, the "login and sync shift program" of the first embodiment is performed. Refer to Figure 3, which describes the five tasks that must be performed in the "Login and Synchronization Process" of the First Embodiment, including work 31, work 2, 3,200, work, 33, work, 4, and 3 cents. Work 5μ(10) In the work one 31〇〇, a client device prepares the information needed by the user to identify the location of the 2010 201023, including a user identification name and a hash value thereof, and then transmits a single two person pass secret Ma computer system. , use, login message to a work = work two wipes, the computer system receives the user device "the user generates a random number - then the challenge message sent to: the World War II and response program to test the user If the client device uses the hash value of the =cut (four) code and the computer system _ (four) certificate value is equal, then the single (four) line password is correct and the password is incorrect. The result of the second pass Mimma work 2 is to determine that the single pass = is correct, then the work 3 3300 is executed, to perform the first type of synchronous shift 2 to obtain - a new random number as the next - single According to this - random number, the verification value of the computer system side and the second t password of the user end are replaced with new values. After that, the computer system of the department allows the user to log in. The client device receives a message for allowing the login to be transmitted by the computer system. If the result obtained after the work 2200 is determined to be that the single pass password is incorrect, then the work 5 5500 is performed, and the computer system rejects The The user's login' and the client device receives a message for denying login sent by the computer system. Then, the above five tasks are respectively explained in conjunction with FIG. 4 to FIG. 7. Referring to FIG. 4, it is a work one. The detailed process of the 3100. The purpose of the work _ 31 is to "prepare the information needed for the user to identify", and the step 39 of the execution is as follows: In step 4100, a user terminal receives a user identification. In the step 4200, the client device reads a second passcode 4〇6〇 from a persistent storage medium 4000. In step 4300, the client device uses the received first pass MM wheel 4_ and the read second pass password side as two inputs of a reply operation type, and replies to calculate _ values, the reply The expression is expressed as: the value to be replied = the reply expression (first pass password, second pass @ cipher 4060). In step 4400, the client device calculates a hash value of the recovered value using the one-way hash function used in step 213 of the "Initial Program" described above. In step 4500, the client device sends a message to a computer system - then requests a login message, and then performs a work 32. Next, please refer to Figure 5, which is the detailed flow of work 2:32. The purpose of Work 2200 is to "determine whether the single pass password is correct". The steps for executing the @ line are as follows. In step 5100, the computer system receives the request to log in message transmitted by the client device in operation 31. In step 5200, the computer system generates a random number as a challenge message. In step 5300, the client device receives the challenge message from the computer system and receives the hash value of the value of the user ID in the work 3100. In step 5400, the client device encrypts the received challenge message by using a hash value of the value replied in the work 31 as an encryption key, and the encrypted message becomes a response message, together with receiving from work 3100. The input of the 5 Hai user identification name is transmitted to the computer system of the department.

In step 5500, the computer system receives the response message and the user identification name 4020. In step 5600, the computer system reads a verification value from its readable-persistent memory medium, indexed by the received user identification name 4020. In step 5700, the computer system uses the read verification value as a decryption key to decrypt the received response message to obtain a restored challenge message. In step _, the computer system compares the challenge message that is restored to the original challenge message, and if it matches, the step is executed to determine that the client device has the correct single-cut password, and then performs the work three. 3_; If it does not match, the steps are executed to determine that the single pass password used by the client device is incorrect, and then the work is performed. Please refer to the X 邗 υυ叼砰绅 υυ叼砰绅 process. Work 2 3300 is the first type of synchronous push-and-shift program, which is an important part of the invention. Its function is to obtain a random number as the touch LL ^ 邗 as the next early pass password, and then verify the computer system side accordingly. Value and use ^, the user knows the second pass password to be replaced with a new value; this update work can be connected, J to adopt two possible orders of which 41 201034423 any kind, and the random number can be generated in the computer The system side can also be executed on the user side. In FIG. 6A, it is assumed that the number of the next-pass password is generated on the user-side device, and it is assumed that the verification value of the computer system is updated first, and the second password of the user terminal is updated. The steps to be performed are as follows. In step 6100, the computer system transmits a synchronously shifted message to the client device. In step 6200, the client device receives the synchronous change message sent by the computer system, and receives the input of the first pass@password in the work 31 and the value returned in the work-3100. Hash value. In step 6300, the client device generates a random number and calculates a hash value of it. In step 6400, the client device encrypts the hash value of the generated random number by using a hash value of the value recovered from the work of 31〇(), and then encrypts the hashed value. The results are transmitted to the computer system of the department. In step 6500, the computer system receives the encrypted result and receives the verification value read in the work 2200. In step 6600, the computer system decrypts the received encryption result by a decryption key received from the verification value of the work 32, and restores the hash value of the random number generated by the client device. In step 6700, the computer system replaces the verification value with the hash value of the random number obtained by the restoration. In step 6800, the computer system transmits another synchronously transmitted 42 201034423 message to the client device. In step 6900, after receiving the message of the other synchronization transition, the client device uses the segmentation operation formula used in step 217 of the "initial program" to generate the random number and reception generated in step 6300. A new second passphrase is calculated from the input of the first pass password of Work 3100. In step 6920, the client device replaces the original second passcode 4060 with the new second passphrase. In step 6940, the client device transmits a confirmation message to the computer system. In step 6960, the computer system receives the confirmation message from the client device, and then performs work 4400. The implementation manner of the first synchronous shifting program described above assumes that the random number as the next single pass password is generated on the device of the user side, and it is assumed that the verification value of the computer system is updated first, and the user's first is updated. The second pass password is after. Here, another embodiment will be described with reference to FIG. 6 , which assumes that the computer system side generates the random number as the next single pass password 'and assumes that the second pass password of the user terminal is updated first, and the computer system is updated. After the verification value of the terminal is followed, the steps performed are as follows. In step 6050, the computer system receives the verification value read in the work 2200. In step 6150, the computer system generates another random number. In step 6250, the computer system encrypts another random number generated by receiving the verification value of the work 32 〇〇, and then transmits the encrypted result to the client. Device. In step 6350, the client device receives the encryption, .’ from the computer system. And, receive the input of the first passphrase in job _ 31 (8) and the hash value of the value recovered in work 3100. In step 6450, the client device uses the hash value of the recovered value received from the work 31〇〇 to decrypt the received result, and restores the computer system to the computer system. Another random number generated by step 6150.

In step 6550, the client device calculates a new first pass password using the restored random number and the input of the first passcode received from Work-3100. In step 6650, the client device replaces the original second passphrase with the new second passphrase. In step 6750, the client device transmits a confirmation message to the computer system. In step 6850, after receiving the confirmation message transmitted by the client device, the computer system calculates a hash value of another random number generated in step 615. In step 6950, the computer system replaces the original verification value with the calculated hash value' and then performs the work 34. Next, please refer to FIG. 7A, which is a detailed process of working four 3400. The purpose of Working 4400 is to determine the user's login, and the steps to perform are as follows. In step 7100, the computer system makes a decision to allow login, 44 201034423 transmits a message allowing login to the client device. In step 7200, the client device receives the message allowing the login to be transmitted by the computer system. Next, please refer to FIG. 7B, which is a detailed process of the work 5 3500, the purpose of which is to decide to refuse the user's login. The work 5 〇〇 is performed after the work 2 3200 makes the single pass password used by the client device to be an incorrect decision, and the steps performed are as follows. φ In step 7600, the computer system makes a decision to refuse to log in, and transmits a message rejecting the login to the client device. In step 7700, the client device receives the message of the refusal to log in transmitted by the computer system. The "login and sync shift program" described above includes the first sync shift program of the present invention. If the sync shift program is completely executed, the second pass password of the user terminal must be verified with the verification value of the computer system side. Replace and replace, the user end and the computer system end must be synchronized; φ If the synchronous shift program is not fully executed, the second pass password of the user end is not replaced with the replacement of the verification value of the computer system side. The user end is not synchronized with the computer system end. When the next-time user logs in, the single pass password calculated by the user end using the original second pass password cannot be determined by the verification value of the computer system end replacement. To be correct, the user is mistakenly refused to log in by the computer system. For the case where the computer system incorrectly rejects the user's login status, most authentication systems are handled by re-executing the initial procedure. In the first embodiment described above, if the first type of synchronous shifting program is not completely executed, the initial program of the user and the computer system π 1 is used to set the screen. Re-execution of the initial program can generate a new random number as a re-initial single pass password, whereby on the computer system side, its persistent memory stores a hash value of the re-initial single pass password as a re The initial verification value is used by the user to calculate a re-initial second password using the re-initial one-pass password, and then deposit the persistent memory that can be read by the user; The user end and the computer system side can be re-synchronized.单 The single pass password re-initialized in b is a new random number, which is the same as the original initial random number (that is, the original initial one-pass password). This can be regarded as impossible; The design of the number generator. In the method of the present invention, since the first pass (four) is selected by the user autonomously, the user can still reuse the original first passphrase when the initial procedure is re-executed. Next, the "change of the first pass password program" of the first embodiment will be described. ❿ Λ f Figure A匕疋—The process of changing the first-password of the user at the 5 hai client device after logging in to a computer system from a client device The steps to be performed are as follows. % change program 8100 is an arrow

The "login and sync shift program" described in the text. In the program 8100, the input and the first and the * terminal devices receive a user identification name of the first pass password input 8040, and 々 ω 圮 媒体 media 8000 _ 讅 & 目 持久 脑 脑 ^ ^ ^ ^ ^ ^ ^ 第二 第二 第二 第二 第二 第二 第二 第二 第二 第二 第二 第二 第二 第二 第二 第二 第二 第二 第二 第二 第二 第二 第二 第二 第二 第二 第二 第二 第二 第二 第二 第二 第二 第二 第二 第二 第二 第二 8000 The 83GG towel, according to the message obtained by executing the program 81(9), if a message refusing to log in is obtained, the client device requests the user to re-transfer the message, and if the message is posted, the client device performs step 8400. In step 8400, the client device receives a random number as the next one-pass password from the program 8100. In step 8500, the client device receives an input as a new first pass password 8050. In 8600, the user terminal device uses the new first pass using the split arithmetic formula used in step 217 of the "initial program" described above. The code 8050 and the next single pass password from the program 8 are used as two inputs to calculate a new second passcode 8_. This splitting operation table is not a new second passphrase = splitting expression (new first passcode 8050, next single passphrase). In step 8700, the client device stores the calculated new second passcode 8080 to the persistent storage medium 8000. The implementation of the change of the first pass password procedure on X is performed by first performing the "Login and Synchronous Transfer Procedure", and then the second pass password that has been replaced by the computer system has been replaced but replaced with the first pass password. Replace it and replace it again. The technique of keeping the verification value of the computer system unchanged but replacing the first passphrase and the second passphrase of the user terminal is also one of the technical contents of the aforementioned patent (Republic of China Patent No. 1293529). The patent further stores the second 47 201034423 hash value of the random number as the secret of the secret on the user's persistent memory medium to be verified by the user end by using the user-provided pass and the user secret. Whether the second hash value of the random number matches the stored secondary hash value. If it matches, the process of changing the password is continued. If it does not match, the user must re-provide the password and the secret of the client, and re-change the password. the process of. The advantage of verifying the number of replies at the user end is that the user can change his password without having to connect to the computer system. According to the above-mentioned technique for verifying the random number of the reply at the user end, in the method of the present invention, if the secondary hash value of the single pass password exists in the persistent memory medium of the user end, the user terminal device can Using the stored secondary hash value to verify whether the single pass password replied is correct, and after confirming that the single pass password replied is correct, the first pass password is changed; in other words, "change first The implementation of the passcode program can also be performed on the user side without having to connect to the computer system. To maintain the secondary hash value of a single passphrase at any time on the client's persistent media, there must be a method in the "initial program" to generate the secondary hash value of the initial single passphrase. There must be a method in the "❹ Login and Synchronization Process" to replace this secondary hash value with the replacement of a single passphrase, as explained below. It is assumed that the "initial program" adds a step 2Π5 (not shown) after step 2170 to calculate a second hash value of the random number (initial single pass password) generated in the original step 212, and then saves Entering the user-readable - persistent memory medium; also assuming that the "login and sync shift program" adds a step 6910 (not shown) after step 6900, 48 201034423 to calculate the chaos generated in the original step 6400 A one-time hash value of the number (next single pass password) and then replace the second hash value of the original one-pass password with the second hash value of the next one-pass password. In this way, the persistent memory of the user terminal can maintain the secondary hash value of the single pass password at any time. Next, an embodiment in which the "change first pass password program" is executed on the user side without being connected to the computer system side will be described, including the steps shown in Fig. 8B, which are explained below. In step 8150, a client device receives an input 8025 for the user identification name and an input 8〇45 for the first pass password. In step 8250, the client device reads a second passcode 8065 and a second hash value 8〇85 from a persistent storage medium 8005. In step 8350, the aforementioned "login and sync shift procedure" is utilized. In the reply operation formula used in step 4300, the client device uses the received first pass password input 8045 and the read second pass password 8065 as two inputs of the reply expression, and the response is calculated as - The value of this reply expression is expressed as: the value to be replied = the reply expression (first pass password 'second pass password 8065). In step 8450, the client device calculates a secondary hash value of the recovered value using the one-way hash function used in step 213 of the "Initial Program". In step 8550, the user equipment compares the secondary hash value of the value of the reply with the read secondary hash value 8〇85, and if it matches, the second step 49 201034423 step _, if not, then returns Step 815 〇 to re-execute the program. In step 8650, the client device receives an input as a new first passphrase 8055. In step 8750, the user segment device uses the segmentation formula used in step 21 of the "initial program" described above to calculate a new one by using the received new first passcode 8055 and the value returned as two inputs. f two pass password 8075. This split expression is expressed as: new second passcode = split expression (new first passcode 8〇55, value of reply). ^ In step 8850, the client device replaces the original second passcode 8065 in the persistent storage medium 8005 with the calculated new second passcode 8075. It will be possible for those skilled in the art to make various modifications or variations that do not depart from the scope or spirit of the invention. Recalling the foregoing description of the steps of the implementation of the first type of synchronous shifting procedure shown in FIG. 6A, the purpose of step 6900 is to calculate a new second passphrase in which the next single passphrase and the first passphrase are used. As two inputs of the splitting expression ;; here, if the calculation performed in step 69〇〇 is changed to a new first passphrase and the next single passphrase as two inputs, a new one is calculated. For the second passphrase, the new first passphrase and the new second passphrase must be used to reply to the correct one-pass password; that is, the user's first passphrase has been Was changed. According to the concept described in the previous paragraph, the work 3300 of the above-mentioned "Login and Synchronization Process 50 201034423" can be changed at the same time, and the user's first pass password can be changed simultaneously in the login and synchronization process. Here, the procedure shown in Fig. 6A is changed as an example. The process of simultaneously changing the first passphrase in the boarding and synchronization shifting program includes the steps shown in Fig. 8C, which are explained below. In step 8170, the computer system receives the verification value read in operation 32. In step 8270, the computer system transmits a synchronously shifted message to the client device. In step 8370, the client device receives the synchronous change message from the computer system and receives the hash value of the value that was recovered in the work. In step 8470, the client device generates a random number and calculates a hash value of it. In step 8570, the client device encrypts the hash value of the generated I number using a hash value received from the value of the reply in the work 31, and then encrypts the encrypted value. The results are transmitted to the computer system of the department. In step 8670, the computer system receives the encryption result, and decrypts the received encryption result by using a verification value received from the working 2200, to restore the random number generated by the user device. In step 8770, the computer system replaces the verification value with the hash value of the random number obtained by the restoration. In step 8870, the computer system transmits another 51 201034423 message of the synchronous transition to the client device β. In step 8890, the client device receives an input after receiving the message of the other synchronization transition. The new first pass password is discussed in step _ in the step 217G of the "initial program" of the first embodiment, and the user equipment uses the random number generated in step 6400 and received. The new first pass password is used to calculate a new second passcode. In step 8920, the client device replaces the original second passcode 4060 with the new second passcode calculated. In step 8940, the client device transmits a confirmation message to the computer system. In step 8960, 'the computer system receives the confirmation message sent by the client's skirt' and then performs the work 4__ to allow the user's login 0 to perform the above steps, and the second password of the user terminal is The verification on the computer system side is replaced with a new value, and the user's first access secret code has also been changed, and the "login and sync change program" and "change first pass password program" are completed at the same time. In the first embodiment described above, the design of the "first type of synchronous shifting program" does not consider the operation of the computer system and the user equipment, and the communication may be interrupted; if the program is not completely executed If the user terminal is not synchronized with the computer system, the user must re-execute the initial program to achieve synchronization between the computer system and the user. 52 201034423 Next, a second embodiment will be described. The second embodiment is the same as the first embodiment'. It also includes a set of "initial procedures", a set of "login and sync change procedures", and a set of "change first pass password procedures"; "login and sync pass procedures" "Includes a set of "second synchronization shift program" and a set of "borrowing synchronization program". The design of the "second synchronous shifting program" has considered the operation of the computer system and the user equipment and the communication between the two may be interrupted. If the user terminal is not synchronized with the computer system due to the interruption, the user The secondary "synchronization program J will be executed when logging in; if the synchronization program is completely executed, the status of the user and the computer system will be corrected to be synchronized; if this synchronization synchronization program If it is not completely executed, it is equivalent to the user's login failure. When this login again, the backup synchronization program will still be executed. The second embodiment also assumes that there is a multi-user computer system. The purpose of the program is to use a client device to generate a random number as an initial one-pass password and store a hash value of this initial one-pass password in the persistent memory of the computer system © As an initial verification value, a user identification name is also stored as an index for obtaining the initial verification value, and at the same time, one will be The "Alternate Verification Value" is initialized to an arbitrary value, and a record of "Confirm Synchronization Flag" is also initialized to "confirmed"; on the user side, the initial single pass password is divided into two parts: one "First Pass" and an initial "Second Passcode", in which the "First Passcode" is automatically selected by the user and remembered by himself, and the initial "Second Passcode" is The first pass password and the initial one-pass password 53 201034423 are one round of two inputs of a split expression, and are stored in a persistent storage medium readable by the user end. The initial procedure described in the previous paragraph contains the steps shown in Figure 9, as explained below. In step 9110, a client device receives a user identification name 9102 and a first passphrase 91〇4. In step 9120, the client device generates a random number as an initial one-pass password. ▲ In step 9130, the client device uses a one-way hash function to calculate a hash value for the initial one-pass password. In step 9140, the client device transmits the user identification name 9102 and the calculated hash value to a computer system. In step 9150, the computer system records the received hash value and the user identification name on the readable persistent memory medium 9', respectively, as an initial verification value of the computer system side. 〇3 and a user identification name 9005 for indexing the initial verification value of 9〇〇3. ❹ In step 9155, the computer system initializes a “standby verification value 9007” with an “arbitrary value”, and also initializes a “confirmation synchronization mark 9009” to “confirmed”, and then the “alternate verification” The value 9〇〇7” and the “confirmation synchronization flag 9〇〇9” are stored in the readable persistent storage medium 9001. In step 9160, the computer system transmits a confirmation message to the client device. 54 201034423 In step /17G, 'the user equipment receives the electric circuit system, confirms the message, and then the (4) first pass code 91G4 and the single pass MM that is produced as the split-calculation Enter the item. (9) The second pass password is simple. This divisional expression is expressed as a second pass code of 91 deg. 91G8 = split arithmetic expression (first pass password 9104, initial single pass password). In step 9180, after the client device stores the calculated initial passcode password in its readable-persistent memory medium 9106 and the computer system, the initial procedure of the second embodiment is performed, 2 to provide its first passphrase and the second passphrase to a client device, and to present the "login and sync move program" of the application to the computer system. Play the first-real parameter: Figure 1〇Α' It expresses the five guards that must be executed in the "Login and Synchronous Change Procedure" order of the second embodiment, including the work of the six deletions, the work seven 10200, the work eight 300 The work is nine purchases and the work is 10,500, as explained below. The purpose of the /, 101GG is to "prepare the information needed for the user to identify", the content of the implementation is the same as the work of the first embodiment, in the work of 〇1〇1〇〇, _ information, Μ4 Prepare the user to remember the desired user name and a single passphrase and its hash value. Then send a message requesting login to: Brain System. . The purpose of working on the 7G2GG is to "determine whether a single pass password is being chosen" 55 201034423 . In the work + 1G200, after the computer system receives the request to log in, it generates a random number as - then set = client device to perform the challenge and response procedure ^ (4) the hash value of the main line and the current verification Value one: =::::rrr Yes; shirt _- get "..." record to check, and if recorded as already met" then decide the single pass secret '-,

: Not confirmed, then execute - Set "Alternate synchronization program to::::: Is the pass password correct?

_If the result obtained after the execution of work 7 10200 is to determine that the single pass is the correct, then the second synchronous shift program of the present invention is executed to obtain a new random number as the next one. According to the random number, the current verification value of the computer system end and the second pass password of the user end are replaced with new values, and the "synchronization mark" in the work +1〇2〇〇 is used. To record whether the computer system has received the confirmation message that the user has replaced the second passphrase; afterwards, perform the work 9400, the computer system allows the user to log in, and the client device receives the computer system A message that is allowed to log in. During the execution of the work 8 10300, if the operation of the computer system and the user device or the communication between the two is interrupted, causing the computer system not to receive the confirmation message that the user has replaced the second passphrase, then "confirm the synchronization." The record of "Marking Mark" will be "Unconfirmed"; if Work 810300 is fully executed, the record of "Confirm Synchronization Mark" will be "confirmed". 56 201034423 If the result obtained after the execution of work 7 10200 is to determine that the single pass password is incorrect, then the work 10 10500 is executed, the computer system rejects the login of the user, and the client device receives the computer system. A message sent to reject the login.

Recalling the contents of Work 7:10200, the design has taken into account the operation of the computer system and the user's h device and the communication of the two may be interrupted; if the user logs in the previous time, the user and the computer system are caused by such a situation. If the terminals are not synchronized, the "alternate synchronization program" in the work 710200 will be executed. Here's a step-by-step way to express work seven! The content of the coffee, which includes five sub-workes, namely work _(1)1〇21〇, work seven_(2)10220, work seven_(3)1〇23〇, jade work seven_(4) 1〇24〇 and work7_(5)1〇25〇; work 7·(3)1〇23〇, work 7(4)1〇24〇 is the “alternate synchronization program”. The five sub-workes are described below. The work seven-(1)1〇2Η) is a procedure for determining whether the hash value of the single pass password matches the current verification value. In this work, after receiving the message requesting the login by the client device, the computer system generates a challenge message to be sent to the client device, and uses the challenge and response program to verify the single pass password used by the client device. Whether the value of the match is consistent with this verification value. If the result obtained after the execution of the Guardian VII (1) is 0, the hash value of the single pass password matches the current verification value, then the work is performed _(2) 丨〇 22 〇 'The computer system determines the user The single pass password used by the end device is correct, and the execution of the work is completed, and then the second is 10,300. #八若进行工作七·(1)1G21() The result obtained is that the single pass 57 201034423 password hash value does not match the verification value, then the computer system is correct, in the user's "Check the synchronization mark" to break the execution of the alternate synchronization program." The content of the alternate synchronization program contains work seven-(3) ι〇23〇 and 卫作七_(4)1〇24〇. If the content of the "Confirmation Synchronization Flag" is "Discrete", the "Alternate Synchronization Program" does not have to be executed. Instead, the work is performed seven (5). The computer system determines the use of the client device. The single pass password is incorrect 'Complete work 7 10200 execution, and then continue to work 10 10500 〇 ^ © If the content of the "Confirm synchronization mark" is "Unconfirmed", the "Alternate Synchronization Program" will be executed. . The work in the alternate synchronization program VII (★3) 10230 is a program that determines whether the hash value of the single pass MM is consistent with the alternate verification value. In this work, the computer system re-verifies the received response message with a backup verification value to determine whether the hash value of the single pass password used by the client device matches the standby verification value. The result of the right execution work _(3) 10230 is that the hash value of the single pass password does not match the standby verification value, then the execution of "alternate synchronization 13th, sequence" is aborted and the work is performed. ) 1〇25〇, the computer system of the Ministry decided that the single pass password used by the client device is not correct to complete the work of the seven 10200, and then continue to perform the work of 10 〇 5 〇〇. If the result obtained after the execution of the work (7) 10230 is that the hash value of the single pass password matches the standby verification value, then the work VII (4) 10240 is performed, and the content is the computer system with the standby verification. The value is replaced by the verification value to correct the computer system end and the user end to be synchronized; after 58 201034423, the work is performed seven-(2) 10220, and the computer system determines the single pass used by the user terminal. The password is correct, and the execution of the work is completed 7:2, and then the work is completed at 8300. Next, the contents of the above five tasks, from work 6-1 to work 1010, will be described with reference to Figs. 11 to 14 . Referring to Figure U, it is a detailed flow of Work 6100, which is a program for the user to prepare the information needed for authentication, the steps performed by it and the steps performed by Work 3100 in the first embodiment (see figure 4) Same. With the words used in the second embodiment, the contents of Fig. 4 are modified as shown in Fig. 2, and the steps are as follows. In step 111GG, a client device receives an input 1120 for the user identification name and an input for the first pass password 11〇4〇. In step 11200, the client device reads a second passcode 11〇6〇 from a persistent storage medium 11000. In step 113GG, the user terminal device receives the first pass password Φ code input U040 and the read second pass password 11060 as two inputs of a reply operation formula, and calls a value to calculate a return operation. The expression is expressed as: the value to be replied = the reply expression (first pass password, second pass password 11060). At step 11400, the client device calculates a hash value of the replied value using the one-way hash function used in step 9130 of the "Initial Procedure" of the second embodiment. In step 11500, the client device sends a message to the computer system to log in, and then performs the work of 7.1. 59 201034423 Next, please refer to Figure 12, which is the detailed process of working seven 1〇2〇〇. The purpose of the work 7 10200 is to "determine whether the single pass password is correct". The steps are as follows. In step 12000, the computer system receives the requesting login message transmitted by the client device at work 6100100. In step 12050, the computer system generates a random number as a challenge message for transmission to the client device. In step 12100, the client device receives the challenge message from the computer system and receives the input 11020 of the user identification name 工作 in the work 6-1 and the hash value of the replied value. In step 12150, the client device uses the hash value of the value replied in the work hexagram (1) as an encryption key to update the received challenge message into a response message, together with receiving. The input of the user identification name from work 6101 is transmitted to the computer system. ’,

In step 12200, the computer system receives the response message and the user identification name 11020. D In step 12250, the computer system reads a user identification name 11G2G as an index, and reads a "this verification value" from the __ persistent storage medium that can be read. In step 12300, the computer system reads the received verification value as a decryption key, and decrypts the received response message to obtain a restored challenge message. In step 12350, the computer system of the department is compared with the one that is restored 60 201034423. The pure balance pattern (four) symbol, if not (four) difficult (four) 12_ times payment is executed (four) m5G, the single (four) code used by the user equipment is determined to be Correct, complete the implementation of the Guardian Seven 1G2 (K), and then perform the work of 10,300. : (4) In the 12400, the computer system of the department reads the user-received user-g, and reads from the readable-persistent memory medium, a "mark of confirmation synchronization". In step 1245G, '^ the record of "confirm synchronization mark" is not confirmed", then the computer system executes step 125; if the record of "domain to two-step mark" is "already" Confirmation, the computer system is executed at step 12700, and it is determined that the single pass password used by the client device is incorrect 'Complete work 丨 10200 is executed, and then the work is deleted. Step 12500, The computer system reads the received user identification 11020 as an index and reads Q "alternate verification value" from its readable-persistent memory medium. In step 12550, the computer system uses the read backup verification value as another decryption key, and performs a decryption operation on the received response message to obtain another restored challenge message. In step 12600, the computer system matches the challenge message that is otherwise restored with the original challenge message. If yes, step 1265 is performed: if not, step 127() is performed to determine the client device. The single-underpass password used is incorrect, and the execution of the work is completed at 7:2, and then the work is performed at 10,500. 61 201034423 In step 12650, the computer system replaces the current verification value with the standby verification value. In step 12680, the computer system of the department changes the content of the flag for confirming the synchronization to the confirmed. In step 12750, the computer system determines that the single pass password used by the client device is correct, completes the execution of the work 7.1, and then executes the work 1010300. Next, please refer to @13, which is the detailed process of working 1G3QQ.

Work 8 10300 is the second synchronous shift program, which is an important part of the present invention. Its function is to obtain a random number as the next single pass password, and accordingly the current verification value of the computer system side and the user side Change the password of the two passwords to a new value, and use the "Confirmation Synchronization Flag" in the work 7.1 to record whether the computer system has received the second password of the user has been replaced; this update The Guardian can pick any of the possible sequences, and the generation of random numbers can be performed on the computer system side as well as on the transfer end. In Figure 13, it is assumed that the random number as the next-pass password is generated on the user-side device, and it is assumed that the current verification value of the computer system is updated first, and the update causes the two-line password to be followed by the execution. The steps are as follows. The first pass in step 13100, the computer system transmits a synchronously shifted message to the client device. In step 13200, the client device receives the synchronous change message sent by the computer system, and receives the hash value of the value recovered in the work (i) and the input password of the first pass password. 62 201034423 In step 13300, the client device generates a random number and calculates a hash value thereof. In step 13400, the client device encrypts the hash value of the random number generated by the encryption key by using the miscellaneous value received from the value recovered in the work 6100, and then transmits the encrypted result to the Computer system. In step 13500, the computer system receives the encryption result and receives the current verification value, the verification synchronization flag, and the backup verification value read by the working 1G2GG towel. In step 13600, the computer system of the department changes the flag for confirming the synchronization to "unconfirmed". In step 13700, the computer system receives the verification value of the work 7.1, and the decryption key decrypts the received encryption result to restore the hash value of the random number. In step 13800, the computer system replaces the backup verification value with the current verification value. In step 13900, the computer system replaces the verification value with the hash value of the random number obtained by the restoration. In step 13910, the computer system transmits another synchronously shifted message to the client device. In step 13930, after receiving the message of the other synchronization transition, the client device uses the segmentation operation formula used in step 9170 of the "initial program" of the second embodiment described above, in step 133. The generated random number and the input of the first passphrase received from the work 610100 are 11〇4() 63 201034423 to calculate a new second passphrase. In step 13950, the client device replaces the original second passcode 11〇6〇 with the new second passcode. In step 13 970, the delta client device transmits a confirmation message to the computer system. In step 13990, the computer system receives the confirmation message from the client device, and changes the confirmation synchronization flag to "confirmed" and then performs the work 9:1. Next, please refer to Figure 14Α, which is the detailed process of working 9G4GG. The purpose of the work nine UMOO is to determine the steps to allow the user to log in to perform the following. In step (4), the computer system makes a decision to allow login to send a message allowing access to the client device. In step 14200, the client device receives the message allowing the login to be transmitted by the computer system. Next, please refer to FIG. 14B', which is a detailed process of deleting the work, and its purpose is to determine the rejection of the system. The work ten ig is executed after the =1 fine decision to make the single pass password used by the client device is an incorrect decision, and the steps of the execution are as follows. In step 14_, the computer system makes a decision to reject the login and transmits a message rejecting the login to the client device. In step 14700, the reverse user terminal receives the message of the denial of login transmitted by the computer system. The "Login and Synchronization Process" of the second or more includes the 64th 201034423 synchronization shift program of the present invention. If the synchronization change program is completely executed, the second password of the user terminal must be replaced with the replacement of the verification value of the computer system end, and the user end and the computer system end must be synchronized, and the synchronization is confirmed. The content of the tag will be "confirmed"; if the synchronization pass program is not fully executed and the second passphrase of the user terminal is not replaced with the replacement of the verification value of the computer system, the user钿Is not synchronized with the computer system side, and confirms the synchronization mark

The content will be "unconfirmed", so 'τ - the user will perform an additional backup synchronization program when the user logs in." If the standby synchronization program is completely executed, the user and the computer system are not synchronized. Will be corrected to sync: If this alternate synchronization program is not fully executed, it is equivalent to the user's failure to log in this time. When you log in again, this alternate synchronization program will still be executed. Next, the "change-pass password program" of the second embodiment will be described. Referring to the figure, it is a process in which a user enters a computer (10) from a client device and then performs a change of the first pass password at the client device, and the steps are as follows. The program 200 is the "login and sync shift program" of the second embodiment described above. In this towel, (4) households "received - a user identification name of the input 15_ and - the first pass password of the input 15_, and self-persistent memory (four) 15_ towel read - a second pass 15嶋' The steps of the "Login and Synchronous Transfer Procedure" of the second embodiment are carried out at the request of the computer system (4). In step 15300, the batch is inserted - &amp;&gt; according to the binding program! Message from 5200, 65 201034423 If a message is rejected, ^ J The user device requests the user Dong Xin to proceed to the program 15200. If _ m m is allowed to log in, the client device performs step 15400. In step 15400, the client device receives a random number from the program 15200 as the next one-pass password. In step 15500, the client authentication device receives an input as a new brother-password 15050. In step 15600, the segmentation method used in step 9170 of the "initial program" of the first embodiment is utilized, and the client device receives the new first passcode 15050 and receives the program. The next-one-pass Z code is calculated as two losers - a new second passcode 15_. This is the cut expression expressed as ······························=================================================== 1. In step 15700, the client device calculates the calculated new first-fourth (four) 15_ storage phase of the persistent memory medium. The above implementation of the "Change First Passphrase Program" is performed by first executing the "Login and Synchronization Shift Procedure" of the first embodiment and then maintaining the current verification value and the standby verification value of the computer system that have been replaced, but The replaced second passcode is replaced again with the replacement of the passphrase password. The technique mentioned above can be implemented using the instructions of the computer software. Such software instructions may be U^^" stored in an object of a machine readable storage medium&apos; or stored in a machine readable memory device coupled to the <RTIgt; </ RTI> <RTIgt; In operation, the Shanghai native 7 is executed by one or more processors, so that a particular machine can perform the functions and operations proposed by the present invention. An example of the 66 201034423 is to implement the above-mentioned computer system operation function as a software in a computer; and the user-side operation method can also be implemented on the user-side computer by using software. A digital device, while a computer or digital device at the user end can be considered a client device relative to the server system. It will be possible for those skilled in the art to make various modifications or variations that do not depart from the scope or spirit of the invention. For example, in the embodiment of the present invention, the persistent memory medium for storing the second passphrase has a choice of 'home-like' portable portable memory media such as a USB flash drive, a memory card, and an individual. The handheld device, such as a mobile phone or PDA, can also be a network hard disk, or a persistent memory medium provided by a website host that stores a second password, and the first and second types of synchronization The program causes the updated computer system side verification value and the user side second pass password to be in either of two possible sequences, and the random number of the next single pass password can be generated on the computer system side or in use. The execution of the random number, as the random number generation process of the next single pass code may be integrated into the user side to calculate the response message; such modification or change will be regarded as one of the present invention. A partial injury 'is stipulated in the present invention as long as it is modified or changed. BRIEF DESCRIPTION OF THE DRAWINGS FIG. 1A is a flow chart of an embodiment of the "initial procedure" of the method of the Republic of China Patent No. 1293529; FIG. 1B is a "user login system system program" of the method of the Republic of China Patent No. 1293529 - Figure 1C is a flow chart of the method of "changing the user 67 201034423 embodiment of the flow chart; a real-end secret of the initial program" and a computer system-side verification value program" of the method of the Republic of China Patent No. 1293529. FIG. 4 is a first schematic diagram of the five operations to be performed in the enclosing process and the synchronous shifting film of the first embodiment of the present invention; FIG. 4 is the first embodiment of the present invention. A flowchart of an embodiment of the work performed in "Login and Synchronous Push" of the embodiment, for the purpose of "the user prepares to identify the required information"; 疋 4

Figure 5 is a flow chart showing an embodiment of the second operation performed in "Login and Synchronization Process" in the first embodiment of the present invention, and its purpose B is "whether the order pass password is correct"; 疋h Figure 6A is the present invention One embodiment of the third operation performed in the "login and synchronization process" of the first embodiment, that is, one of the embodiments of the "first synchronization shift program" of the present invention; FIG. 6B is the embodiment of the present invention. Another embodiment of the work performed in the "Login and Synchronization Process" of the first embodiment is the flow chart of the present embodiment.

Another embodiment of the first type of synchronous shifting program; FIG. 7A is a flow chart showing an embodiment of the fourth operation performed in the "login and synchronization shifting program" of the first embodiment of the present invention, which determines the use of the system. FIG. 7B is a flowchart of an embodiment of the fifth operation performed in the r login and synchronization shifting program of the first embodiment of the present invention, which is intended to be a user's login"; FIG. 8A is the present invention. A flowchart of an embodiment of the "change of the first pass code 裎68 201034423" in the first embodiment; FIG. 8B is another embodiment of the "change-pass-exhaustion procedure" of the __ embodiment of the present invention FIG. 8C is a flow chart showing still another embodiment of the "changing the first pass password program" of the first embodiment of the present invention; FIG. 9 is a view of the "initial program" of the second embodiment of the present invention. FIG. 10A is a schematic diagram of five operations to be performed in the login and synchronization shift program J of the second embodiment of the present invention; FIG. 10B is a "login and synchronization shift" of the second embodiment of the present invention. In the program A schematic diagram of five sub-workes included in the work seven; FIG. 11 is a flow chart of an embodiment of the work performed in the r login and synchronization shift program of the second embodiment of the present invention, the purpose of which is "user FIG. 12 is a flow chart showing an embodiment of the work performed in the "login and sync shift program" of the second embodiment of the present invention, the purpose of which is to "determine whether a single pass password is 13 is a flowchart of an embodiment of the work 8 performed in the "login and synchronization shift program" of the second embodiment of the present invention, that is, the second synchronization shift program of the factory of the present invention" FIG. 14A is a flow chart showing an embodiment of the work performed in the "login and sync shift program" of the second embodiment of the present invention, the purpose of which is "allow; user login"; A flowchart of an embodiment of the work performed in "Login and Synchronization Process 69 201034423" in the second embodiment, the purpose of which is "Deciding to deny the user's login"; and Figure 15 is The second embodiment of the invention, the "first change of password procedure" one flowchart embodiment.

70 201034423 [Description of main component symbols] 1102 User identification name 1104 Passphrase 1106 User-side persistent memory media 1108 Client secret 1109 Computer system-side persistent memory media ❿ 1110~1180 Step 1202 User identification name input 1204 pass Password input 1206 Client's persistent memory 1208 User secret 1205~1280 Steps ® 1302 User identification name input 1305 program, the user device and a computer system login program 1306 user terminal persistence Sex Memory Media 1308 Client Secret 1309 New Client Secret 1310~1370 Step 2002 Persistent Memory Media 2004 Computer System Initial Authentication Value 2006 User Identification Name 2102 User Identification Name 2104 First Pass Password 2106 User End Persistence Memory Media 2108 initial second passcode 2110~2180 Step 3100 Work of the first embodiment 3200 Work of the first embodiment 3300 Work of the first embodiment 3400 Work of the first embodiment 3500 Work of the first embodiment 71 201034423 Five 4000 user-side Long memory media 4020 user identification name input 4040 first pass password input 4060 second pass password 4100~4500 step 6050~6960 step 7100~7200 step 7600~7700 step 8000 user end persistent memory medium 8005 user End of the persistent memory media 8020 user identification name input 8025 user identification name input 8040 first pass password input 8045 first pass password input 8050 new first pass password 8055 new first pass password 8060 second Passcode 8065 second passcode 8070 new first passcode 8075 new second passcode 8080 new second passcode 8085 secondary hash value 8100 program, "Login and sync shift procedure" in the first embodiment 8150~8960 Step 9001 Computer System Side Persistence Memory Media 9003 Initial This Verification Value 9005 User Identification Name 9007 Initial Backup Verification Value ® 9009 Confirm Synchronization Flag 9102 User Identification Name 9104 First Pass Password 9106 User End persistent memory medium 9108 initial second passphrase 72 201 034423 9110~9180 step hui 10100 work of the second embodiment six 10 2 0 0 first embodiment work seven 10210 work seven _ (1) 10220 work seven - (2) 10230 work seven - (3) 10240 work seven - (4) 10250 work seven - (5) 10 3 0 0 work of the second embodiment eight 10400 work of the first embodiment nine 10500 work of the second embodiment ten 11000 user-side persistent memory media 11020 user identification Name input 11040 First pass password input 11060 Second pass password 11100~11500 Step 12000~12750 Step 13100-13990 Step 14100~14200 Step 14600-14700 Step 15000 User-side persistent memory 15020 User identification name input 15040 first pass exhausted input 15050 new first pass password 15060 second pass Mimar 15080 new second pass 彳 f $ code 15200 program 15300~15700 step hui 73

Claims (1)

201034423 VII. Patent application scope: 1. A user authentication method using a single pass password, comprising the following steps: a user uses a client device to transmit a request to log in to a computer system; the client device Calculating a single passphrase using a first passphrase provided by the user and a second passphrase from a persistent storage medium; the computer system is read from a persistent memory medium a verification value to determine whether the single pass password is correct; if the right pass password is correct, the computer system performs a synchronous shift procedure, and then transmits - then allows the message to be sent to the client device; If the single passcode is incorrect, the computer system transmits a message rejecting the call to the client device. 2. If you apply for a patent scope! The item mentioned also # κ 八令 The computer system of the Ministry. The process of owing the password to the correct password includes the following steps. The computer system transmits a challenge message to the client device. The client device utilizes a one-way hash function, the hash value of the code; Passing the secret 74 201034423 ❹ After receiving the challenge message, the client device encrypts the challenge message to the response message with the hash value, and then transmits the response message back to the computer system; After receiving the response message, the computer system decrypts the response message by the decryption key. The computer system compares the decrypted message with the original challenge message. If it matches, the single pass password is set. Yes, it is determined that the single pass password is incorrect. 3. As described in the second paragraph of the patent application, the sequence includes the following steps: The test is a correct one, if not, the message of the process of the synchronization is performed. Giving the user the computer system to execute a synchronous push-end device; the function meter calculates a hash value of the IL number; In a random number, the one-way hash is used to encrypt the hash value of the random number (the fourth) of the password of the user-supplied device (4), and the result of the secret is transmitted to the department. a computer system; the computer system uses the verification value as the decryption key to decrypt the received encryption result, restores the hash value of the random number, and then replaces the verification value with the hash value of the random number obtained by the restoration , · 75 201034423 The computer system transmits another terminal device; a message of performing the synchronous shift to the user device to receive the message of the other execution, the track is changed, and a new number is calculated by the random number The second pass password and the pass code replacement are used to calculate the second pass password of the new second single pass password sent to the computer system by the client device to transmit a confirmation message; the computer system receives the The confirmation message transmitted by the client device For calculating the single pass, the first pass password is the same as the method described in claim 3, and the first pass code of the fee code is not replaced. 5. The method described in item 1 of the patent application is selected by the user autonomously. 6.- User plating method using a single pass password, including the following steps The user transmits a request for login message to a computer system by using the client device; the client device calculates a single cut password; the computer system determines whether the single pass password is positive; if If the single pass password is broken, execute a synchronous process 76 201034423 'The computer system then transmits a message allowing the login to the client device; if the single pass password is incorrect, the computer system Send a message rejecting the login to the client device. 7. The method of claim 6, wherein if the user device receives the message allowing the login, the next time the user logs in to the computer system, the user and the computer system The end is synchronized. 8. The method of claim 6, further comprising: the process by which the client device calculates the single pass password utilizes two inputs 'the first entry is a first pass provided by the user. The second input is a second pass password read by the client device from a persistent record. ❹ 9. As for the method of applying for the patent scope of the 8th, the process of determining whether the single pass password is broken is the following steps: The computer system transmits the challenge message to the client device; The client device calculates the hash value of the code by using the I-to-material function; after the client device receives the encrypted money (4), the 'catch value' is encrypted and the challenge message is encrypted to be a Then, the response message should be sent back to the computer system; 77 201034423 After receiving the response message, the computer system reads from a persistent memory medium - this verification value is - the decryption gold (four) (four) The response message is decrypted; if the decrypted message of the computer system matches the original challenge message, it is determined that the single pass password is correct; if the decrypted message does not match the original challenge, the self-sustaining 〇 〇 memory media read - a confirmation of the synchronization mark, if the record on the mark is confirmed ' then the computer system determines that the single pass (four) is not correct , If the recording mark is determined husband Wo &lt; ', the computer system performs a portion of the alternate synchronization procedure. Synchronization 10. According to the method described in claim 9, the execution of the program includes the following steps: The computer system reads a backup verification value from another persistent recording medium as another The decryption key re-decrypts the response message; if the right re-solution is completed and the subsequent message matches the original challenge message, the computer system determines that the password is correct, and then (4) the alternate verification value updates the verification value, and then The confirmation synchronization token is changed to confirmed; if the re-dismissal, the subsequent message still does not match the original challenge message, the computer system determines that the single-cut password is not rude. 78 201034423 11. The method of claim </ RTI> </ RTI> </ RTI> </ RTI> <RTIgt; </ RTI> </ RTI> </ RTI> </ RTI> </ RTI> </ RTI> </ RTI> </ RTI> </ RTI> </ RTI> </ RTI> </ RTI> </ RTI> </ RTI> Using the one-way hash function to calculate the hash value of the random number; e. The client device encrypts the hash value of the random number by using the encryption key as the hash value of the single pass password And then transmitting the result of the encryption to the computer system; the computer system changes the confirmation synchronization flag to unconfirmed; the computer system uses the current verification value to receive another decryption record. The encryption result is decrypted, the hash value of the random number is restored, and the certificate value is replaced by the verification value of the spring, and then the verification value is replaced by the hash value of the gift number obtained by the restoration; The system transmits another message, and then performs a synchronous transition message to the client device; after receiving the message of the synchronization transition, the client device receives the random number Calculating a new second passphrase; the client device replaces the first passphrase for calculating the single passphrase with the new second passphrase, and then transmits a message to the computer system. After receiving the confirmation message, the computer system of the department changes the confirmation synchronization flag to confirmed. 12. The method of claim 5, wherein the first pass password for calculating the single pass, code is not replaced. 13. If the method described in claim 8 is applied, the first password is chosen by the user autonomously. 14. A computer comprising a storage medium and a set of instructions stored in the medium, the instruction set causing the computer to perform the following steps: receiving a request for login information from a client device; transmitting a challenge message to the a client device; receiving a response message sent by the client device; Use this verification value to calculate the response message to generate a result, which is better than whether the result is the same as the challenge message; if it matches, execute the set-synchronization process, and then send a permission to log in. The message is sent to the client device; if the right does not match, a confirmation synchronization flag is obtained; if the tag record is confirmed, a message rejecting the login is transmitted to the client device; 80 201034423 If the tagged record In the case of unconfirmed, a set of alternate synchronization procedures is executed, after which the transmission - allows or denies the message to the client device. 15. The computer of claim 14, wherein the instruction set includes the step of the set of alternate synchronization procedures: using the alternate verification value to perform an operation on the response message to generate another result; Whether the other result matches the challenge message; if it matches, the current verification value is replaced with the backup verification value, and the record of the mark is changed to confirmed, and then a message allowing the login is sent to the a client device; if not, transmitting a message rejecting the login to the client device. The instruction set herein includes the steps of the set of synchronous shifting procedures of the computer as described in claim 15: transmitting an execution synchronization Sending the message to the good end device; receiving an encrypted result from the client device; changing the flag to unconfirmed; and verifying the value as a decryption key to decrypt the received encrypted result , a decrypted result; 81 201034423 replace the alternate verification value with the current verification value; replace the result with the decryption The verification value is transmitted; another message for performing the synchronization transition is transmitted to the client device; receiving the user-installed value #&amp; code device transmitted--the confirmation message; changing the flag to the confirmed. 17. An object, including a storage medium, stores an executable-series instruction set, which causes the client device to perform the following steps: Sending a message to the computer system; receiving the computer from the computer The system sends a challenge message; receives a first passphrase input; self-persistent memory media reads the H passphrase password; enters the first passphrase password, the read second passphrase and the received challenge message To generate - then respond to the message; 传送 transmit the message back to the computer system; receive a message from the computer system that refuses to log in, or receive a message from the computer system to perform the synchronization If the message of the synchronous transition is received, a set of synchronous shifting process is performed with the computer system; after the synchronous shifting process is executed, the message that the computer system is allowed to log in is received. 82 201034423 18. The object of claim 17, wherein the instruction set causes the client device to perform the generation of the response message, comprising the steps of: inputting the first pass password and the reading The second passphrase generates a value; the value is used as an encryption key to operate the received challenge message to generate the response message. © 19 · The object described in claim 18, wherein the set of instructions causes the set of synchronous shifting procedures performed by the client device to include the following steps: generating a random number; calculating the one by using a one-way hash function a hash value of the random number; using the encryption key to encrypt the hash value of the random number to obtain an encrypted result; _ transmitting the encrypted result to the computer system; receiving the computer system of the department The other performs a synchronous shift. The message calculates a new second passphrase in the random number; and replaces the second passphrase with the new second passphrase to transmit a confirmation message to the computer system. 83