Safe TOTP verification method and system

The invention belongs to the technical field of MFA multi-factor authentication, and particularly discloses a secure TOTP verification method and system, a verification program applies for key binding from a verification system SVS and obtains an authorization link, the verification system generates...

Full description

Saved in:
Bibliographic Details
Main Authors SUN SHOUREN, WEN GUOXING, ZHANG MINGHU
Format Patent
LanguageChinese
English
Published 25.06.2024
Subjects
Online AccessGet full text

Cover

Loading…
More Information
Summary:The invention belongs to the technical field of MFA multi-factor authentication, and particularly discloses a secure TOTP verification method and system, a verification program applies for key binding from a verification system SVS and obtains an authorization link, the verification system generates a digital certificate, a server side key SSK and the authorization link, and the digital certificate, the server side key SSK and the authorization link are sent to the verification system SVS. The authentication program S-TOTP sends an authorization link SAL to a user through a short message mail or a mode that the user scans a two-dimensional code by using a verification program, after signature verification succeeds, the verification program S-TOTP generates a client key SCK and encrypts the client key SCK by using a public key certificate of the user, and the verification program transmits the encrypted client key SCK to the verification system SVS; after the verification system SVS receives the client secret
Bibliography:Application Number: CN202410263098