企业级免密认证系统开发实践

Development and practice of enterprise-level secret-free authentication system

论文提出了一种基于企业级内外网应用场景的非涉密登录关键技术——"身份口令扫码识别"复合技术,避免在一个平台下面同时获取帐号、密码问题,同时避免在输入过程中出现帐号密码明文的问题。在使用过程中无需用户输入用户账号和密码,通过"手机扫码+动态数字"方式验证,一键完成认证登录企业应用。

This paper proposes a key technology of non-cryptographic login based on enterprise intranet/Extranet application scenario--"Identity Password scanning identification"compound technology,which avoids obtaining account number and Password at the same time under one platform At the same time avoid in the input process appears the account number password clear text question.In the process of using the user does not need to enter the user account and Password,through mobile phone scanning+dynamic digital authentication,one button to complete the authentication login enterprise applications.