Authentication method and system

An authentication method, comprising:

• sending, by a server, a challenge value to a client terminal;
• acquiring, by the server, authentication information returned by the client terminal, wherein the authentication information is generated based on signature information, a first value, and an authentication factor, the signature information is obtained by signing the challenge value, the first value is used for representing the number of operations of signing the challenge value, and the authentication factor is used for representing login information of the client terminal logging in to the server;
• and
• verifying, by the server, the authentication information.

An authentication system, comprising:

• a server, configured to send a challenge value;
• and
• a client terminal, having a communication relationship with the server, and configured to generate authentication information based on signature information, a first value, and an authentication factor, wherein the signature information is obtained by signing the challenge value, the first value is used for representing the number of operations of signing the challenge value, and the authentication factor comprises one of the following:
• a login time and a second value corresponding to a target application,
• wherein the server is further configured to verify the authentication information to obtain an authentication result.