What is a dynamic password?

Dynamic password is also called one-time password (One-time Password), which means that the user's password changes dynamically according to time or the number of uses, and each password is only used once. Dynamic passwords use a special piece of hardware called a dynamic token, which is about the size of a flash drive and displays like an electronic watch. It has a built-in power supply, password generation chip and display.

The password generation chip runs a specialized password algorithm to generate the current password based on the current time or number of uses and displays it on the display. The authentication server uses the same algorithm to calculate the current valid password.

Since the password used each time must be generated by a dynamic token, only legal users hold the dynamic token and two-factor authentication hardware, so as long as the password verification is passed, the system can consider the user's Identity is reliable. The password used by the user is different every time. Even if a hacker intercepts the password once, he cannot use this password to impersonate the identity of a legitimate user.

Extended information:

Generating terminal dynamic passwords:

Currently, the mainstream terminals used to generate dynamic passwords include hardware tokens, SMS passwords, mobile phone tokens, and software There are four types of tokens.

1. SMS password

SMS password requests a dynamic password containing 6 or more random numbers in the form of a mobile phone message. The identity authentication system sends random 6/8 digits in the form of SMS. The password is transferred to the customer's mobile phone, and the customer enters this dynamic password when logging in or performing transaction authentication, thereby ensuring the security of the system's identity authentication.

2. Hardware token

The most popular one currently is the hardware password token based on time synchronization. It changes the dynamic password every 60 seconds. The dynamic password is valid once and it generates 6 digits. /8-digit dynamic number.

3. Mobile token

Mobile token is a kind of mobile client software. It is based on time synchronization and generates a random 6-digit dynamic password every 30 seconds. The generation process does not incur communication and fees, and has the advantages of simple use, high security, low cost, no need to carry additional equipment, easy acquisition, and no logistics. Mobile phone tokens are the development trend of dynamic password identity authentication in the 3G era.

Mobile tokens are available in J2ME, iPhone, Andriod, and Windows Mobile 6 versions. They can be widely used in areas with large user bases such as online games and the Internet. The use of mobile tokens will greatly reduce the need for dynamic password service management. And operating costs, user convenience.

Baidu Encyclopedia-Dynamic Password

Baidu Encyclopedia-Dynamic Password