TWI704795B - Login authentication method - Google Patents

Abstract

A login authentication method provides a key verification code and a corresponding pair of public key and private key being respectively stored in the service provider and an user's computer. When the user login to the service, the service provider gives a random string and a returning signature URL to the user's computer. The user's computer encrypts the random string into a digital signature with a private key, and transmits it to the return signature website for the service provider computer. The service provider computer decrypts with the public key to verify that the random string is correct, and if correct, the user is logged into the service. By the above method, users may login to the service without reciting their account and password. There will be no problem with losing the account and password and the login procedure is simple and highly secure.

Description

Login authentication method

The invention relates to an asymmetric key authentication method, in particular to a login authentication method in which a character string obtained during login is encrypted as a signature login.

Existing network services, such as e-mail, social networking sites or instant messaging software, when logging in to the service, the account and password obtained when registering the service are mainly used to log in to the above-mentioned network service on a personal computer or mobile phone. The account is usually set It is the user's email box. After the user is registered, the service provider will send the password of the corresponding account to the user's email box for the user to receive and use when logging in to the service.

Because the above method of logging in to the network service is to log in to the service in the form of account and password, users need to enter the account and password in the interface of the program or webpage to log in to the service. Some people even write the account and password because they are worried about forgetting the account and password. In the notes or notes, such a way of reciting the account and password, in addition to making the process of logging in to the service more troublesome, the account and password written on the notes or notes can also be easily stolen and cause information security problems.

Since the existing method of logging in to the network service requires the use of an account and password, in addition to being easy to forget, it is also easy to be stolen and cause security problems. For this reason, the present invention utilizes a pair of golden keys to cooperate with encryption and decryption of a random string, which can achieve a secure login effect without the need to input account passwords.

In order to achieve the above objective, the present invention provides a login authentication method on the computer side of a service provider. The steps include: outputting a random string and a website address: a pair of private key and public key corresponding to a key verification code are stored in an authentication login. A computer and a service provider computer. The service provider computer provides a service. When the user wants to log in to the service on a login computer, the service provider computer will give a return signature URL and a random address according to the user’s request String; receiving digital signature: the service provider’s computer receives a digital signature returned by the authentication login computer from the return signature URL, and the digital signature is the random character of the authentication login computer using the private key The key verification code of the private key that encrypted it can be identified by the digital signature; and the authentication login: the service provider computer uses the public key corresponding to the key verification code to unlock the digital Sign, verify whether the random string in the digital signature is the same as the random string given to the user by the service provider computer, and if they are the same, allow the user to log in to the service on the login computer.

Preferably, in the present invention, in the step of outputting the random string and the URL, the service provider computer displays a two-dimensional bar code on a display of the login computer, and the information of the two-dimensional bar code includes the Random string and the return signature URL, the user executes an encrypted authentication program on the authentication login computer, uses a lens of the authentication login computer to shoot and recognize the two-dimensional barcode to obtain the service provider’s computer In the step of receiving a digital signature, the digital signature is obtained by encrypting the random string with the private key by the authentication login computer executing the encryption authentication program.

Preferably, in the present invention, in the step of outputting the random string and the URL, the service provider computer displays the random string and the return signature URL on a display of the login computer , The user executes an encrypted authentication program on the authentication login computer and enters the random string and the return signature URL into the encrypted authentication program, thereby obtaining the random string provided by the service provider computer In the step of receiving the digital signature, the digital signature is obtained by encrypting the random string with the private key by the authentication login computer executing the encryption authentication program.

Preferably, in the present invention, in the step of outputting a random string and a website address, the service provider computer displays a mobile phone number field or an electronic device input provided by the user on a display of the login computer. Mailbox field; when the authentication login computer is a mobile phone and the user enters the mobile phone number into the mobile phone number field, the service provider computer will send the random string and the return signature with a text message The website address is sent to the authentication login computer so that the authentication login computer obtains the random string and the return signature URL given by the service provider computer; and when the user enters the electronic mailbox that the authentication login computer can receive into the electronic After the mailbox field, the service provider computer sends the random string and the return signature URL to the authentication login computer by e-mail, so that the authentication login computer obtains the service provider’s computer. A random string and the return signature URL; in the step of receiving a digital signature, the digital signature is obtained by encrypting the random string with the private key by the authentication login computer executing an encryption authentication program.

Preferably, in the present invention, in the step of outputting the random string and the URL, the service provider computer displays an authentication service URL field provided by the user on a display of the login computer; The authentication login computer is a server and runs an encrypted authentication program to provide authentication services on the Internet. When the user enters the authentication service URL of the authentication service into the authentication service URL field, the service provider computer can query the string Redirect the random character string and the return signature URL to the authentication service website, so that the authentication service website obtains the random character string and the return pass from the service provider’s computer. Signature URL; in the step of receiving a digital signature, the digital signature is obtained by encrypting the random string with the private key by the authentication login computer executing the encryption authentication program.

The present invention also provides a login authentication method for authenticating a login computer terminal, the steps of which include: Receive random string and URL: the paired private key and public key corresponding to a key verification code are stored in a certified login computer and a service provider computer respectively, and the user of the certified login computer is provided by the service provider computer When a user of a service wants to log in to the service on a login computer, the service provider’s computer will give a postback signature URL and a random string according to the user’s request, and the authentication login computer will receive The return signature URL and the random string; output digital signature: The authentication login computer encrypts the random string into a digital signature with the private key, and the encrypted digital signature can be identified by the digital signature. The key verification code of the private key, the digital signature is output to the return signature URL; and the authenticated login: the digital signature is obtained by the service provider’s computer from the return signature URL and corresponds to the payment The public key of the key verification code is unlocked. If it is verified that the random string in the digital signature is the same as the random string given to the user by the service provider’s computer, the user is allowed to log in to the service on the login computer .

Preferably, in the step of receiving the random character string and the URL in the present invention, the service provider computer displays a two-dimensional barcode on a display of the login computer, and the information of the two-dimensional barcode includes the Random string and the return signature URL, the user executes an encrypted authentication program on the authentication login computer, uses a lens of the authentication login computer to shoot and recognize the two-dimensional barcode to obtain the service provider’s computer In the step of outputting the digital signature, the digital signature is obtained by encrypting the random string with the private key by the authentication login computer executing the encryption authentication program.

Preferably, in the step of receiving the random character string and the website address in the present invention, the service provider computer displays the random character string and the return signature website address on a display of the login computer , The user executes an encrypted authentication program on the authentication login computer and enters the random string and the return signature URL into the encrypted authentication program, thereby obtaining the random string provided by the service provider computer In the step of outputting the digital signature, the digital signature is obtained by encrypting the random string with the private key by the authentication login computer executing the encryption authentication program.

Preferably, in the step of receiving a random string and a website address in the present invention, the service provider computer displays a mobile phone number field or an electronic device input provided by the user on a display of the login computer. Mailbox field; when the authentication login computer is a mobile phone and the user enters the mobile phone number into the mobile phone number field, the service provider computer will send the random string and the return signature with a text message The website address is sent to the authentication login computer so that the authentication login computer obtains the random string and the return signature URL given by the service provider computer; and when the user enters the electronic mailbox that the authentication login computer can receive into the electronic After the mailbox field, the service provider computer sends the random string and the return signature URL to the authentication login computer by e-mail, so that the authentication login computer obtains the service provider’s computer. Random string and the return signature URL; in the step of outputting the digital signature, the digital signature is obtained by encrypting the random string with the private key by the authentication login computer executing an encryption authentication program.

Preferably, in the step of receiving the random string and the URL in the present invention, the service provider computer displays an authentication service URL field input by the user on a display of the login computer; The authentication login computer is a server and runs an encrypted authentication program to provide authentication services on the Internet. When the user enters the authentication service URL of the authentication service into the authentication service URL field, the service provider computer can query the string Redirect the random character string and the return signature URL to the authentication service website, so that the authentication service website obtains the random character string and the return pass from the service provider’s computer. Signature URL; in the step of outputting a digital signature, the digital signature is obtained by encrypting the random string with the private key by the authentication login computer executing the encryption authentication program.

The effect of the present invention is that, through the method of the present invention, the computer of the service provider can give authentication to log in the computer random string and return the signature URL, and use the private key to encrypt the random string as a digital signature. Then, return to the return signature URL for the service provider’s computer to obtain and verify the user’s identity. The process is encrypted and can be compared with a random string at the moment to confirm whether the requester to log in to the service is verified by the corresponding key. The user of this service can use the paired public key and private key to encrypt and decrypt the random string without entering the account and password on the login computer, allowing the user to log in to the service on any login computer , To avoid the inconvenience of reciting account numbers and passwords and the security problems that may be caused by easy loss of account numbers and passwords.

S01: Step

S02: Step

S03: Step

S04: Step

S05: Step

S06: Step

10: service

11: Service provider computer

12: Authentication login computer

121: Encryption Authentication Program

122: lens

13: Log in to the computer

131: Display

132: Login time limit

14: Two-dimensional barcode

141: Random string

142: Return signature URL

20: public key

21: Private key

A: Service provider

B: User

C: digital signature

30: Mobile phone number field

31: E-mail field

32: Authentication service URL field

Fig. 1 is a schematic diagram of the method of the first preferred embodiment of the present invention.

Fig. 2 is a flowchart of the service provider side of the first preferred embodiment of the present invention.

Fig. 3 is a flowchart of the user end of the first preferred embodiment of the present invention.

Fig. 4 is a schematic diagram of a method according to a second preferred embodiment of the present invention.

Figure 5 is a schematic diagram of the third preferred embodiment of the present invention.

In order to understand the technical features and practical effects of the present invention in detail, and implement it according to the content of the specification, the preferred embodiment shown in the figure is further described in detail as follows.

Please refer to the first preferred embodiment of the present invention shown in FIGS. 1 to 3, which provides a login authentication method for logging in a service 10 provided by a service provider A on the Internet, such as e-mail, social networking sites , Instant messaging software, shopping websites, fund-raising websites or online forums.

The above-mentioned service 10 is set up on a service provider computer 11, such as a server or a virtual server in the cloud. When a user B registers for the service, he first logs in to the computer 12 such as a mobile phone or tablet, and logs in with the certificate. The encryption and decryption program executed by the Internet browser of the computer 12, or pre-installed in the authentication An encrypted authentication program 121 of the certificate login computer 12 connects to the service 10 to register an account. During the registration process, a pair of public key 20 and private key 21 corresponding to a Key ID is generated, where the public key is The key 20 is stored in the service provider computer 11, the service provider A can identify the identity of the user B and the public key 20 corresponding to the user B with the key verification code, and the private key 21 is stored in the certificate The computer 12 is logged in and can be used by the encrypted authentication program 121.

As shown in Figures 1 to 2, after user B registers for the service 10, the service provider A of this preferred embodiment accepts user B to log on to the service 10, steps S01 to S03 include:

(S01) Output random string and URL: the paired private key 21 and public key 20 corresponding to a key verification code (Key ID) have been stored in the authentication login computer 12 and the service provider computer 11, respectively, the service The provider computer 11 provides a network service 10, and the authentication login computer 12 executes an encrypted authentication program 121.

When user B wants to log in to the service 10 through the Internet on a login computer 13, the service provider computer 11 will follow the user B's request on the login computer 13, for example, in the web browser of the login computer 13 The login request is triggered when the service 10 is logged in, so that the service provider computer 11 displays a two-dimensional barcode 14, such as a QR Code, on the display 131 of the login computer 13 within a login time limit 132, such as 90 seconds. The information of the barcode 14 includes a random character string 141 and a postback signature URL 142. The random character string 141 contained in the two-dimensional barcode 14 on the display 131 is different each time the login time limit 132 is reached or the login webpage is refreshed. Then user B executes the encrypted authentication program 121, uses the lens 122 of the authentication login computer 12 to photograph the two-dimensional barcode 14, and automatically obtains the random string 141 and the return signature given by the service provider computer 11 after identification URL 142.

(S02) Receiving a digital signature: The service provider computer 11 receives a digital signature C from the certified login computer 12 that is sent back to the return signature URL 142 from the network, and the digital signature C is the certified login computer 12 The encryption authentication program 121 is executed to encrypt the random string 141 with the private key 21, and the digital signature C can identify the key verification code of the encrypted private key.

(S03) Authentication login: The service provider computer 11 unlocks the digital signature C with the public key 20 corresponding to the key verification code, and verifies the random string 141 in the digital signature C and the service provider Is the random string 141 output by the current login time limit 132 of the computer 11 the same? If they are the same, the user B is allowed to log in to the service 10 on the login computer 13; if they are different, the user B is denied to the login computer 13 Log into the service 10.

As shown in Figures 1 and 3, after user B registers for the service 10, the steps S04 to S06 for the user B to log in to the service 10 include:

(S04) Receive random string and URL: the paired private key 21 and public key 20 corresponding to a key verification code (Key ID) have been stored in the authentication login computer 12 and the service provider computer 11, respectively. Person B is a user of a network service 10 provided by the service provider computer 11, and the authentication login computer 12 has installed an encrypted authentication program 121; the service provider computer 11 is based on user B in a login computer 13 requests to register the service 10, within a login time limit 132, for example, 90 seconds, a two-dimensional barcode 14, such as a QR Code, is displayed on the display 131 of the login computer 13, and the information of the two-dimensional barcode 14 includes a random The string 141 and a signature URL 142 are sent back. The random string 141 generated every time the login time limit is 132 or the login page is refreshed will be updated one by one; User B drives the authentication login computer 12 by running the encrypted authentication program 121 The lens 122 captures and recognizes the two-dimensional bar code 14, and after recognition, the random string 141 and the return signature URL 142 are obtained from the computer 11 of the service provider.

(S05) Output digital signature: After the encrypted authentication program 121 executed by the authentication registration computer 12 obtains the random string 141, it encrypts the random string 141 with the private key 21 into a digital signature C. The digital signature C can identify the key verification code of the encrypted private key, and output the digital signature C to the return signature URL 142 via the network for the service provider computer 11 to obtain.

(S06) Authenticated login: The digital signature C is unlocked by the service provider computer 11 with the public key 20 corresponding to the key verification code, and the random string 141 in the digital signature C is verified with the service Whether the random string 141 output by the provider computer 11’s current login time limit 132 is the same, if the same Then the user B is allowed to log in to the service 10 on the login computer 13, and if it is different, the user B is denied to log in to the service 10 on the login computer 13.

In addition to the aforementioned first preferred embodiment of the present invention, when performing the step of outputting a random string and URL (S01) or the step of receiving a random string and URL (S04), the lens 122 of the computer 12 is logged in with the authentication Take the two-dimensional bar code 14 and obtain the random string 141 given by the service provider’s computer 11 and the return signature URL 142 after identification. The service provider’s computer 11 displayed on the display 131 of the login computer 13 The two-dimensional barcode 14 can also be read by the encrypted authentication program 121 of the authentication registration computer 12 through network hard disk, Bluetooth transmission, SD card transfer and other means. After the encryption authentication program 121 recognizes the digital image of the two-dimensional barcode 14, it obtains the random string 141 and the return signature URL 14 given by the service provider computer 11. Or, as in the second preferred embodiment or the third preferred embodiment described below, the service provider computer 11 can give the random string 141 and the return signature URL through other means at the request of the user B 142.

As shown in the second preferred embodiment in FIG. 4, the service provider computer 11 displays on the display 131 of the login computer 13 within the login time limit 132 according to the request of the user B on the login computer 13 For the random character string 141 and the return signature URL 142, the random character string 141 generated every time the login time limit 132 or the login webpage is refreshed will be updated one by one; user B combines the random character string 141 with the The return signature URL 142 is input to the encrypted authentication program 121, so that the authentication login computer 12 manually obtains the random string 141 and the return signature URL 142 given by the service provider computer 11, and provides the encrypted authentication program 121 Use it in the subsequent step (S02) or step (S05).

As shown in the third preferred embodiment of FIG. 5, the service provider computer 11 displays the mobile phone number input by user B on the display 13 of the login computer 13 according to the request of user B on the login computer 13. Field 30 (if the authentication login computer 12 is a mobile phone), e-mail field 31, or authentication service URL field 32 (if the authentication login computer 12 is a server, and the encrypted authentication program 121 is executed to provide Internet Certification Services).

First, after user B enters the mobile phone number of the authentication login computer 12 (ie mobile phone) into the mobile phone number field 30, the service provider computer 11 sends the random string 141 to the The return signature URL 142 is sent to the authentication login computer 12, so that the authentication login computer 12 automatically obtains the random string 141 and the return signature URL 142 given by the service provider computer 11, and provides the encryption The authentication program 121 is executed and used in the subsequent step (S02) or step (S05).

Secondly, when user B enters the e-mail box that can be received by the authentication login computer 12 into the e-mail box field 31, the service provider computer 11 sends the random string 141 to the reply by e-mail. The signature URL 142 is sent to the authentication login computer 12 so that the authentication login computer 12 automatically obtains the random string 141 and the return signature URL 142 given by the service provider computer 11, and provides the encryption authentication The program 121 is executed and used in the subsequent step (S02) or step (S05).

Furthermore, when the user B enters the authentication service URL field 32 of the authentication service URL field 32 of the authentication registration computer 12 (ie, the server) that executes the encrypted authentication program 121, the service provider computer 11 uses the query string (QueryString ) To redirect the random string 141 and the return signature URL 142 to the authentication service website, so that the authentication login computer 12 can automatically obtain the service provider computer 11 from the authentication service website. The random string 141 and the return signature URL 142 provide the encryption authentication program 121 for execution and use in the subsequent step (S02) or step (S05).

The foregoing descriptions are only preferred embodiments of the present invention, and are not intended to limit the scope of the rights claimed by the present invention. All other equivalent changes or modifications completed without departing from the spirit disclosed by the present invention shall be included in the present invention. Within the scope of patent application.

10: service

11: Service provider computer

12: Authentication login computer

121: Encryption Authentication Program

122: lens

13: Log in to the computer

131: Display

132: Login time limit

14: Two-dimensional barcode

141: Random string

142: Return signature URL

20: public key

21: Private key

A: Service provider

B: User

C: digital signature

Claims (12)

A login authentication method, the steps include: Output random string and URL: the paired private key and public key corresponding to a key verification code are stored in an authentication login computer and a service provider computer. The service provider computer provides a service and the user wants to When logging in to the service on a computer, the service provider’s computer will give a postback signature URL and a random string according to the user’s request; Receiving digital signature: The service provider’s computer receives a digital signature returned by the certified login computer from the return signature URL. The digital signature is obtained by encrypting the random string by the certified login computer with the private key The digital signature can identify the key verification code of the private key that encrypted it; and Authentication login: The service provider computer unlocks the digital signature with the public key corresponding to the key verification code, and verifies the random string in the digital signature and the random word given to the user by the service provider computer Whether the strings are the same, if they are the same, the user is allowed to log in to the service on the login computer. For example, the login authentication method of claim 1, wherein in the step of outputting a random string and a URL, the service provider computer displays a two-dimensional bar code on a display of the login computer, and the information of the two-dimensional bar code Containing the random string and the return signature URL, the user executes an encrypted authentication program on the authentication login computer, and uses a lens of the authentication login computer to capture and recognize the two-dimensional barcode to obtain the service The random string and the return signature URL given by the provider’s computer; in the step of receiving the digital signature, the digital signature is the authentication log-in computer executing the encrypted authentication program and the private key to the random string Encrypted. Such as the login authentication method of claim 1, wherein in the step of outputting a random string and a URL, the user executes an encrypted authentication program on the authentication login computer, and the service provider computer transmits a two-dimensional barcode The digital image to the encrypted authentication program, the information of the two-dimensional barcode includes the random string and the return signature URL, the encrypted authentication program recognizes the digital image of the two-dimensional barcode and obtains it from the service provider’s computer In the step of receiving a digital signature, the digital signature is obtained by encrypting the random string with the private key by the authentication login computer executing the encryption authentication program. For example, the login authentication method of claim 1, wherein in the step of outputting a random string and a URL, the service provider computer displays the random string and the reply on a display of the login computer Pass the signature URL, the user executes an encrypted authentication program on the authentication login computer and enters the random string and the return signature URL into the encrypted authentication program, thereby obtaining the random authentication program given by the service provider’s computer In the step of receiving the digital signature, the digital signature is obtained by encrypting the random string with the private key by the authentication login computer executing the encryption authentication program. For example, the login authentication method of claim 1, wherein in the step of outputting a random string and a URL, the service provider computer displays a cell phone number field provided by the user on a display of the login computer Digit or an e-mail field; when the authentication login computer is a mobile phone and the user enters the mobile phone number into the mobile phone number field, the service provider’s computer sends the random string to the Send the return signature URL to the authentication login computer, so that the authentication login computer can obtain the random string and the return signature URL given by the service provider computer; and After the user enters the e-mail box that the authentication login computer can receive into the e-mail box field, the service provider computer sends the random string and the return signature URL to the authentication login by email The computer enables the authentication login computer to obtain the random string and the return signature URL given by the service provider computer; in the step of receiving the digital signature, the digital signature is the authentication login computer performs an encryption The authentication program encrypts the random string with the private key. For example, the login authentication method of claim 1, wherein in the step of outputting a random string and a website address, the service provider computer displays an authentication service website input provided by the user on a display of the login computer Field; the authentication login computer is a server and executes an encrypted authentication program to provide authentication services on the Internet. When the user enters the authentication service URL of the authentication service into the authentication service URL field, the service provider computer Redirect the random string and the return signature URL to the authentication service website by way of query string, so that the authentication login computer can obtain the random string given by the service provider computer from the authentication service website And the return signature URL; in the step of receiving the digital signature, the digital signature is obtained by encrypting the random string with the private key by the authentication login computer executing the encryption authentication program. A login authentication method, the steps include: Receive random string and URL: the paired private key and public key corresponding to a key verification code are stored in a certified login computer and a service provider computer respectively, and the user of the certified login computer is provided by the service provider computer When a user of a service wants to log in to the service on a login computer, the service provider’s computer will give a postback signature URL and a random string according to the user’s request, and the authentication login computer will receive The return signature URL and the random string; Output digital signature: The certified login computer uses the private key to encrypt the random string into a digital signature. The digital signature can identify the key verification code of the encrypted private key, and the digital signature The chapter is output to the URL of the return signature; and Authenticated login: The digital signature is obtained by the service provider’s computer from the return signature URL and unlocked with the public key corresponding to the key verification code. If the random string in the digital signature is verified with If the random string given to the user by the service provider computer is the same, the user is allowed to log in to the service on the login computer. For example, the login authentication method of claim 7, wherein in the step of receiving a random string and a URL, the service provider computer displays a two-dimensional bar code on a display of the login computer, and the information of the two-dimensional bar code Containing the random string and the return signature URL, the user executes an encrypted authentication program on the authentication login computer, and uses a lens of the authentication login computer to capture and recognize the two-dimensional barcode to obtain the service The random string and the return signature URL given by the provider’s computer; in the step of outputting the digital signature, the digital signature is the authentication log-in computer executing the encrypted authentication program and the private key to the random string Encrypted. For example, the login authentication method of claim 7, wherein in the step of receiving a random string and a URL, the user executes an encrypted authentication program on the authentication login computer, and the service provider computer transmits a two-dimensional barcode The digital image to the encrypted authentication program, the information of the two-dimensional barcode includes the random string and the return signature URL, the encrypted authentication program recognizes the digital image of the two-dimensional barcode and obtains it from the service provider’s computer In the step of outputting the digital signature, the digital signature is obtained by encrypting the random string with the private key by the authentication login computer executing the encryption authentication program. For example, the login authentication method of claim 7, wherein in the step of receiving a random character string and a website address, the service provider computer displays the random character string and the reply on a display of the login computer Pass the signature URL, the user executes an encrypted authentication program on the authentication login computer and enters the random string and the return signature URL into the encrypted authentication program, thereby obtaining the random authentication program given by the service provider’s computer In the step of outputting the digital signature, the digital signature is obtained by encrypting the random string with the private key by the authentication login computer executing the encryption authentication program. For example, the login authentication method of claim 7, wherein in the step of receiving a random string and a website address, the service provider computer displays a mobile phone number field provided by the user on a display of the login computer Digit or an e-mail field; when the authentication login computer is a mobile phone and the user enters the mobile phone number into the mobile phone number field, the service provider’s computer sends the random string to the Send the return signature URL to the authentication login computer, so that the authentication login computer can obtain the random string and the return signature URL given by the service provider computer; and After the user enters the e-mail box that the authentication login computer can receive into the e-mail box field, the service provider computer sends the random string and the return signature URL to the authentication login by email The computer enables the authenticated login computer to obtain the random string and the return signature URL given by the service provider computer; in the step of outputting the digital signature, the digital signature is that the authenticated login computer performs an encryption The authentication program encrypts the random string with the private key. For example, the login authentication method of claim 7, wherein in the step of receiving a random string and a website address, the service provider computer displays an authentication service website address provided by the user on a display of the login computer Field; the authentication login computer is a server and executes an encrypted authentication program to provide authentication services on the Internet. When the user enters the authentication service URL of the authentication service into the authentication service URL field, the service provider computer Redirect the random string and the return signature URL to the authentication service website by way of query string, so that the authentication login computer can obtain the random string given by the service provider computer from the authentication service website And the return signature URL; in the step of outputting the digital signature, the digital signature is obtained by encrypting the random string with the private key after the authentication login computer executes the encryption authentication program.

Images