Barcode security authentication method

A security authenticating method of two dimension code, which can be applied in a system comprising a token side, a client side, an application server and an authentication server, wherein the method comprises the following steps:

• A1) receiving, by the application server, a user accessing request comprising a username information through the client side, determining whether the user accessing request is legitimate, if yes, generating a request for obtaining the two dimension code comprising the username information according to the user accessing request, and sending the requesting for obtaining the two dimension code to the authentication server;
• otherwise, returning an error message to the client side;
• A2) obtaining, by the authentication server, the username information according to the request for obtaining the two dimension code, generating a challenge value, generating the two dimension code information, in which the two dimension code information comprises two dimension code identification information, establishing a corresponding relationship with the username information and the challenge value respectively according to two dimension code identification information, storing the two dimension code identification information, the username information and the challenge value, and sending the two dimension code information to the application server;
• A3) obtaining, by the application server, two dimension code image information according to the two dimension code information, sending the two dimension code image information to the client side, displaying, by the client side, a two dimension code image according to the two dimension code image information;
• A4) obtaining, by the mobile terminal token, the two dimension code image information according to the two dimension code image, obtaining the two dimension code information according to the two dimension code image information, in which the two dimension code information comprises the two dimension code identification information, obtaining the challenge value according to the two dimension code information, generating a user mobile terminal token response value according to user mobile terminal token information of the mobile terminal token and the challenge value, and sending the two dimension code identification information and the user mobile terminal token response value to the authentication server;
• A5) obtaining, by the authentication server, the challenge value corresponding to the two-dimensional identification information and username information according to the two dimension code identification information, obtaining user authentication token information according to the username information, generating a user authentication token response value according to the user authentication token information and the challenge value, and obtaining the two dimension code authentication result according to the user authentication token response value, the user mobile terminal token response value, and the username information;
• A6) receiving, by the authentication server, the request for authenticating the two dimension code sent from the application server, then sending the two dimension code authentication result to the application server;
• and
• A7) returning, by the application server, the user accessing result to the client side according to the two dimension code authentication result;
• after the Step A3, and before the Step A6, the method further comprises:
• receiving, by the application server, a request for the two dimension code authentication through the client side, and sending the request for the two dimension code authentication to the application server.

A security authenticating method of two dimension code, comprising the following steps:

• T1) receiving, by the authentication server, a request for obtaining a two dimension code from the application server, generating a challenge value, generating two dimension code information comprising two dimension code identification information, generating corresponding relationship according to the two dimension code identification information and the challenge value, and storing the challenge value and the two dimension code identification information, sending the two dimension code information to the application server, in which the two dimension code information is configured to display a two dimension code image;
• T2) receiving, by the authentication server, two dimension code identification information, user mobile terminal token response value, and user mobile terminal token information from the mobile terminal token, obtaining the user authentication token information and username information which are corresponding to the user mobile terminal token information according to the user mobile terminal token information, obtaining the challenge value corresponding to the two dimension code information according to the two dimension code identification information, generating the user authentication token response value according to the user authentication token information and the challenge value, and obtaining the two dimension code authentication result according to the user authentication token response value, user mobile terminal token response value, and the username information;
• and
• T3) receiving, by the authentication server, the request for authenticating a two dimension code from the application server, then sending the two dimension code authentication result to the application server;
• after Step T1, the method further comprises:
• receiving, by the authentication server, the request for authenticating the two dimension code from the application server.

A security authenticating method of two dimension code, comprising the following steps:

• W1) receiving, by a authentication server, a request for obtaining a two dimension code, which comprises username information from an application server, generating a challenge value, generating two dimension code information, in which the two dimension code information comprises two dimension code identification information, establishing a corresponding relationship with the username information and the challenge value respectively according to the two dimension code identification information, storing the two dimension code identification information, the username information and the challenge value, and returning the two dimension code information to the application server, in which the two dimension code information is configured to display a two dimension code image;
• W2) receiving, by the authentication server, the two dimension code identification information and the user mobile terminal token response value from the mobile terminal token, obtaining the challenge value and the username information which are corresponding to the two dimension code identification information according to the two dimension code identification information, obtaining user authentication token information according to the username information, generating user authentication token response value according to the user authentication token information and the challenge value, and obtaining a two dimension code authentication result according to the user authentication token response value, the user mobile terminal token response value, and the username information;
• and
• W3) after receiving, by the authentication server, the request for authenticating a two dimension code from the application server, sending the two dimension code authentication result to the application server;
• after the Step W1, the method further comprises:
• receiving, by the authentication server, the request for authenticating a two dimension code from the application server.