INDEX BASED USER AUTHENTICATION APPARATUS AND METHOD

摘要

PURPOSE: An index-based user authentication device and a method thereof are provided to reduce a possibility of a user password exposure caused by hacking by randomly allocating index values about character values and transmitting index allocation information related to the values to a terminal. CONSTITUTION: A database (211) stores character values and index values to be allocated to the character values. When an index information request related to a user authentication is received from a client terminal, an index allocating unit (212) randomly allocates the index values to the character values to generate an index allocation information. An information transmitting unit (213) transmits the index allocation information to the client terminal. An index receiving unit (214) receives an index value corresponding to a character value related to the user authentication based on the index allocation information. A confirming unit (215) confirms the character value including the index value based on the index allocation information. [Reference numerals] (211) Database; (212) Index allocating unit; (213) Information transmitting unit; (214) Index receiving unit; (215) Confirming unit; (216) Authentication performing unit; (217) Key receiving unit; (218) Key producing unit; (219) Session key producing unit; (220) Encryption unit; (221) Open key transmitting unit; (230) Client terminal