Network authentication method using a card device

A network authentication method to be implemented using a terminal device that includes a user terminal, and a card device coupled to the user terminal, for authenticating at least a to-be-authenticated network server, the card device storing an application that is associated with a network transaction between a specific network server and the user terminal, a reference application key that is also included in the application, and a reference server key that is associated with the specific network server, said network authentication method comprising the steps of:

• i) by the card device, generating an application dynamic link program based on an application verification code that corresponds to the application stored in the card device, and encrypting the application dynamic link program with the reference application key;
• ii) after receipt of an application that includes an application key and that is associated with the network transaction, by the user terminal, through execution of the application received thereby, acquiring from the card device the application dynamic link program encrypted by the card device, generating application code data based on the application key included in the application that is executed thereby and on the application dynamic link program acquired thereby, and sending to the card device the application code data generated thereby;
• iii) by the card device, verifying the application executed by the user terminal based on relationship between the application code data from the user terminal and the application verification code;
• A) when the application executed by the user terminal is successfully verified in step iii), by the user terminal, through execution of the application, establishing a communication link with the to-be-authenticated network server over a communication network and sending a server verification request to the card device;
• B) by the card device, upon receipt of the server verification request from the user terminal, generating a server dynamic link program based at least on a server verification code corresponding to the specific network server, encrypting the server dynamic link program with the reference server key, and sending the server dynamic link program encrypted thereby to the user terminal;
• C) by the user terminal, through the execution of the application, transmitting the server dynamic linking program generated and encrypted by the card device to the network server via the communication network;
• D) by the user terminal, upon receipt via the communication network of a server code data from the to-be-authenticated network server as generated by the to-be-authenticated network server based on the server dynamic link program, sending the server code data received thereby to the card device through the execution of the application;
• and
• E) by the card device, verifying whether or not the to-be-authenticated network server is the specific network server based on a relationship between the server code data from the user terminal and the server verification code in step B).