System and method for identity authentication

A method, comprising:

• receiving, by an authentication system, a verification code sent by a front-end device;
• decrypting, by the authentication system, the verification code according to a predetermined decryption algorithm;
• verifying, by the authentication system, a result of decrypting the verification code, the verification code being generated by the front-end device based at least in part on encrypting account information and a security certificate associated with an account corresponding to the account information;
• in response to a determination that the result of decrypting the verification code is successfully verified, querying, by the authentication system, the front-end device as to whether the front-end device is to access an authentication system;
• in response to a determination that the front-end device is to access the authentication system, establishing a network connection with the front-end device;
• and
• receiving, by an authentication system, a login request from the front-end device, wherein the login request comprises account information of an account associated with the front-end device, and the login request does not include a password associated with the account;
• determining, by the authentication system, a confirmation device associated with the front-end device based at least in part on the account information;
• generating, by the authentication system, an authentication request based at least in part on the account information, wherein said authentication request comprises said account information;
• obtaining, by the authentication system, confirmation information from the confirmation device, the confirmation information being generated based at least in part on the authentication request and confirming the login request;
• and
• authenticating, by the authentication system, the front-end device based at least in part on the confirmation information.

A method, comprising:

• sending, by a front-end device, a verification code to an authentication system, wherein the authentication system decrypts the verification code according to a predetermined decryption algorithm, and verifies a result of decrypting the verification code, the verification code being generated by the front-end device based at least in part on encrypting account information and a security certificate associated with an account corresponding to the account information;
• receiving, from the authentication system, a query as to whether the front-end device is to access the authentication system, the query being sent by the authentication system in response to a determination that the result of decrypting the verification code is successfully verified;
• in response to a determination that the front-end device is to access the authentication system,
• establishing a network connection with the authentication system;
• and
• sending a login request to the authentication system, wherein the login request comprises account information of an account associated with the front-end device, and the login request does not include a password associated with the account;
• and
• receiving a result of a login associated with the login request, the result being communicated to the front-end device by the authentication system, wherein the login request is used by the authentication system to determine that a confirmation device is associated with the front-end device based at least in part on the account information, in connection with generating an authentication request based at least in part on the account information, wherein the authentication request comprises the account information, in connection with obtaining confirmation information from the confirmation device, and in connection with authenticating the front-end device based at least in part on the confirmation information.

A method, comprising:

• receiving, by an authentication system, a verification code sent by a front-end device;
• decrypting, by the authentication system, the verification code according to a predetermined decryption algorithm;
• verifying, by the authentication system, a result of decrypting the verification code, the verification code being generated by the front-end device based at least in part on encrypting account information and a security certificate associated with an account corresponding to the account information;
• in response to a determination that the result of decrypting the verification code is successfully verified, querying, by the authentication system, the front-end device as to whether the front-end device is to access an authentication system;
• in response to a determination that the front-end device is to access the authentication system,
• establishing a network connection with the front-end device;
• and
• receiving, by a target host, a login request from the front-end device, wherein the login request comprises account information of an account associated with the front-end device, and the login request does not include a password associated with the account;
• sending, by the target host, the account information to an authentication server and causing the authentication server to send an authentication request to a confirmation device, wherein the authentication request comprises the account information, and the authentication server determines that the confirmation device is associated with the front-end device based at least in part on the account information;
• and
• in response to a determination that confirmation information is received from the confirmation device in response to the authentication request, authenticating, by the target host, the front-end device based at least in part on the confirmation information.

A computer program product, the computer program product being embodied in a non-transitory computer readable storage medium and comprising computer instructions for:

• receive a verification code sent by a front-end device;
• decrypt the verification code according to a predetermined decryption algorithm;
• verify a result of decrypting the verification code, the verification code being generated by the front-end device based at least in part on encrypting account information and a security certificate associated with an account corresponding to the account information;
• in response to a determination that the result of decrypting the verification code is successfully verified, query the front-end device as to whether the front-end device is to access an authentication system;
• in response to a determination that the front-end device is to access the authentication system,
• establish a network connection with the front-end device;
• and
• receive a login request from the front-end device, wherein the login request comprises account information of an account associated with the front-end device, and the login request does not include a password associated with the account;
• determine a confirmation device associated with the front-end device based at least in part on the account information;
• generate an authentication request based at least in part on the account information, wherein said authentication request comprises said account information;
• obtain confirmation information from the confirmation device, the confirmation information being generated based at least in part on the authentication request and confirming the login request;
• and
• authenticate the front-end device based at least in part on the confirmation information.