In a typical authentication process, the local system verifies the user's identity using a stored hash value generated by a cross-system hash algorithm. This article shifts the research focus from traditional password encryption to the establishment of gatekeeping mechanisms for effective interactions between a system and the outside world. Here, we propose a triple-identity authentication system to achieve this goal. Specifically, this local system opens the inner structure of its hash algorithm to all user credentials, including the login name, login password, and authentication password. When a login credential is entered, the local system hashes it and then creates a unique identifier using intermediate hash elements randomly selected from the open algorithm. Importantly, this locally generated unique identifier (rather than the stored hash produced by the open algorithm) is utilized to verify the user's combined identity, which is generated by combining the entered credential with the International Mobile Equipment Identity and the International Mobile Subscriber Identity. The verification process is implemented at each interaction point: the login name field, the login password field, and the server's authentication point. Thus, within the context of this triple-identity authentication system, we establish a robust gatekeeping mechanism for system interactions, ultimately providing a level of security that is equivalent to multi-factor authentication.
翻译:在典型的认证过程中,本地系统利用跨系统哈希算法生成的存储哈希值来验证用户身份。本文将研究重点从传统的密码加密转向建立系统与外部世界有效交互的门控机制。为此,我们提出一种三重身份认证系统以实现该目标。具体而言,本地系统将其哈希算法的内部结构对所有用户凭证开放,包括登录名、登录密码和认证密码。当输入登录凭证时,本地系统对其进行哈希处理,然后利用从开放算法中随机选取的中间哈希元素生成唯一标识符。重要的是,这种本地生成的唯一标识符(而非开放算法生成的存储哈希值)被用于验证用户的组合身份,该组合身份由输入的凭证、国际移动设备识别码(IMEI)和国际移动用户识别码(IMSI)结合而成。验证过程在每个交互点实施:登录名字段、登录密码字段以及服务器认证点。因此,在该三重身份认证系统的框架下,我们为系统交互建立了稳健的门控机制,最终提供与多因素认证等效的安全级别。