Network Authentication Method using a Card Device

摘要

A network authentication method includes: by a user terminal, through execution of an application, connecting to a network server and sending a server verification request to a card device coupled to the user terminal; by the card device, generating a server dynamic link program based on a server verification code, encrypting the server dynamic link program, and transmitting the encrypted server dynamic linking program to the network server through the user terminal; by the user terminal, sending a server code data received from the network server to the card device as generated by the network server based on the server dynamic link program; and by the card device, verifying the network server based on the server code data and the server verification code.

主权项

1. A network authentication method to be implemented using a terminal device that includes a user terminal, and a card device coupled to the user terminal, for authenticating at least a to-be-authenticated network server, the card device storing an application that is associated with a network transaction between a specific network server and the user terminal, and a reference server key that is associated with the specific network server, said network authentication method comprising the steps of:
A) by the user terminal, through execution of the application, establishing a communication link with the to-be-authenticated network server over a communication network and sending a server verification request to the card device; B) by the card device, upon receipt of the server verification request from the user terminal, generating a server dynamic link program based at least on a server verification code corresponding to the specific network server, encrypting the server dynamic link program with the reference server key, and sending the server dynamic link program encrypted thereby to the user terminal; C) by the user terminal, through the execution of the application, transmitting the server dynamic linking program generated and encrypted by the card device to the network server via the communication network; D) by the user terminal, upon receipt via the communication network of a server code data from the to-be-authenticated network server as generated by the to-be-authenticated network server based on the server dynamic link program, sending the server code data received thereby to the card device through the execution of the application; and E) by the card device, verifying whether or not the to-be-authenticated network server is the specific network server based on a relationship between the server code data from the user terminal and the server verification code in step B).