Verification method and system thereof

A verification system, comprising a server side and a user side, in which the server side comprises:

• a receiving module configured for receiving user data information and a first dynamic password from the user side;
• a generating module or a generating and splitting module, in which the generating module is configured for generating a second authenticating dynamic password after the server side verifies that the first dynamic password is correct by using a first authenticating dynamic password, and is further configured for generating a third authenticating dynamic password;
• the generating and splitting module is configured for generating a second authenticating dynamic password after the server side verifies that the first dynamic password is correct by using a first authenticating dynamic password and splitting the second authenticating dynamic password into a first password and a second password according to a predetermined rule;
• a sending module configured for sending the second authenticating dynamic password or a first password to the user side;
• wherein
• if the sending module is configured for sending the second authenticating dynamic password to the user side,
• the receiving module is further configured for receiving a third password from the user side and the server side further comprises a verifying module configured for verifying the third password received by the receiving module from the user side, wherein if the verification is successful, the user side is legitimate;
• or
• the receiving module is further configured for receiving encrypted cipher information from the user side, and the server side further comprises a decrypting module configured for decrypting the encrypted cipher information received from the user side to obtain plain information;
• a determining module configured for determining whether the plain information is in accordance with the transaction information;
• and an executing module configured for executing transaction after determining that the plain information is in accordance with the transaction information by the determining module;
• if the sending module is configured for sending the first password to the user side,
• the receiving module is further configured for receiving a second dynamic password returned by the user side, and the server side further comprises a verifying module for verifying the second dynamic password by using the second password, wherein if the verification is successful, the user is determined to be legitimate, or
• the receiving module is further configured for receiving cipher information from a user side and the server side further comprises a decrypting module configured for decrypting encrypted cipher information received by the receiving module from the user side, in which the cipher information is obtained by encrypting the transaction information by the user side with a third password which is the rest part data of the second dynamic password after receiving a confirming information that the user determines that the first password is in accordance with a corresponding part data of the second dynamic password by comparison;
• a determining module configured for determining whether the plain information is in accordance with the transaction information;
• and an executing module configured for executing transaction after the determining module determines that the plain information is in accordance with the transaction information,
• further comprising an updating module configured for updating a dynamic factor, and correspondingly, the generating module is further configured for generating the second authenticating dynamic password by using the updated dynamic factor,
• wherein the generating module is configured for generating the second authenticating dynamic password based on time or event, and
• when the generating module generates the second authenticating dynamic password based on time, the updating module is configured for setting the dynamic factor to be a first dynamic factor used by the user side for generating the first dynamic password, in which the first dynamic factor is a count value when generating the first dynamic password by the user side;
• adding a predetermined step size on the dynamic factor so as to be used as the updated dynamic factor;
• when the generating module generates the second authenticating dynamic password based on time, the updating module is configured for:
• setting the dynamic factor to be a first dynamic factor used by the user side for generating the first dynamic factor, in which the first dynamic factor is a difference between the counting time of generating the first dynamic password by the user side and the preset initial time of the user side;
• updating counting time offset according to the dynamic factor, wherein the counting time offset is a difference between the current counting time of an entity which generates the second authenticating dynamic password and the current counting time of the user side;
• generating an updated dynamic factor according to the counting time offset, the counting time which is used for generating the second authenticating dynamic password by the entity and the predetermined initial time of the entity.