Safe TOTP verification method and system
The invention belongs to the technical field of MFA multi-factor authentication, and particularly discloses a secure TOTP verification method and system, a verification program applies for key binding from a verification system SVS and obtains an authorization link, the verification system generates...
Saved in:
Main Authors | , , |
---|---|
Format | Patent |
Language | Chinese English |
Published |
25.06.2024
|
Subjects | |
Online Access | Get full text |
Cover
Loading…
Summary: | The invention belongs to the technical field of MFA multi-factor authentication, and particularly discloses a secure TOTP verification method and system, a verification program applies for key binding from a verification system SVS and obtains an authorization link, the verification system generates a digital certificate, a server side key SSK and the authorization link, and the digital certificate, the server side key SSK and the authorization link are sent to the verification system SVS. The authentication program S-TOTP sends an authorization link SAL to a user through a short message mail or a mode that the user scans a two-dimensional code by using a verification program, after signature verification succeeds, the verification program S-TOTP generates a client key SCK and encrypts the client key SCK by using a public key certificate of the user, and the verification program transmits the encrypted client key SCK to the verification system SVS; after the verification system SVS receives the client secret |
---|---|
Bibliography: | Application Number: CN202410263098 |