Two-factor authentication makes the user’s account safe and worry-free editing

In today's digital and information technology, " account " has become an indispensable network pass certificate for everyone. It is associated with personal digital assets and privacy, and even affects the security of real assets.

How to ensure the security of user accounts is an issue that all developers attach great importance to, and " authentication" user identity 160f069a01e4be, is a key step to ensure account security.

We often see this kind of news: bank APP passwords are leaked, deposits are transferred, causing major economic losses; game accounts are maliciously logged in by others, and all the items purchased by Krypton are emptied; social accounts appear to log in from other places and publish inappropriate remarks...

With the development of network technology, login methods are becoming more and more convenient, and the use of account login vulnerabilities to illegally log in to other people's accounts, damage the interests of others or obtain improper benefits is also endless. The important reason for these incidents is the single authentication method. The login process is not rigorous.

The user name + password authentication method is too simple. Once the user password is leaked, it may cause irreparable losses. How to deal with the above-mentioned phenomena and problems?

The answer is the two-factor authentication method. This authentication method fills in the loopholes that may occur in the process of confirming the user's identity, and greatly guarantees the user's account security.

What is two-factor authentication?

Two-factor authentication is a that time synchronization technology uses a one-time password based on the three variables of time, event and key to replace the traditional static password.

In layman's terms, in addition to the combination of user name and password, a layer of highly random security authentication is added, that is, a dynamic verification code, which is used to ensure the security of the identity of the user who logs in and uses the account. It is also commonly referred to in the industry as Two-step verification, or multi-factor verification.

Because of the different variables during each authentication, the verification code generated each time is also different. Since the parameters are random in each calculation, each verification code is also unpredictable, so that the security of login is guaranteed in the most basic password authentication link.

Two-factor authentication is applicable to diversified scenarios. Generally speaking, two-factor authentication can be integrated wherever there is a static password.

Nowadays, two-factor authentication has been widely used in various fields, and its manifestations include USB-Shield of online banking, SMS verification code, etc. Regardless of whether it is a financial domain, a social domain or an audiovisual domain, the authentication method of username + password + dynamic password has become an effective means for websites and APPs to avoid risks, and a powerful guarantee for the digital assets and personal privacy of related user groups.

At present, the equipment and technology of two-factor authentication are quite mature, and its solution mainly has three components:

authentication equipment (token), agent software and management server.

The authentication agent software plays a role between the end user and the network resources that need to be protected. When a user wants to access a certain resource, the authentication agent software sends the request to the authentication management server for authentication.

In order to ensure the operability of two-factor authentication, the server responsible for receiving two-factor authentication requests and verification, and two-factor authentication management work needs to have high reliability and security, support a variety of two-factor authentication devices, and be able to communicate with enterprises conveniently Convergence of IT infrastructure, including the access of front-end network equipment and business systems, as well as back-end account systems such as AD, LDAP, etc.

For individual developers and small and medium-sized enterprises, two-factor authentication is quite necessary in terms of the security and reliability of data assets, but the investment in research and development of agent software and management servers is not worth the loss. Two-factor authentication is already available in the integrated market. The service account system is the best choice.

The two-factor authentication function of HUAWEI ID has been tested by developers and the market, and its security is unquestionable. In addition, HUAWEI ID service risks real-time notifications, compliance with GDPR privacy regulations, multiple guarantees for account security, and can also help apps automatically read verification codes. It can also be read through user authorization to further enhance the user verification experience.

For more details, please refer to: Huawei account service

Huawei Developer Alliance official website, development guide document

Huawei Mobile Services open source warehouse address: GitHub , Gitee

Visit Huawei official forum

Original link: https://developer.huawei.com/consumer/cn/forum/topic/0201569046968400775?fid=18
Original Author: Pepper