| 摘要 |
An operating method for a push authentication system and device, belonging to the field of information security. The method comprises: an application interface receiving user information and sending same to an application server; the application server sending the user information and an application identifier to an authentication server; the authentication server generating a push authentication request according to a generated challenge value, token information, the user information and an application name corresponding to the application identifier and sending same to a mobile terminal token; the mobile terminal token generating login information according to the push authentication request, and generating a first response value according to the challenge value when a user selects to confirm login and sending same to the authentication server; and the authentication server generating a second response value according to the challenge value, and returning a authentication success result to the application server when the first response value and the second response value are the same. The present invention can improve the data transmission speed of traditional authentication, and a user does not need to participate in the input of a password, thereby preventing the man-in-the-middle attack and improving the security of authentication. |
