PUBLIC KEY INFRASTRUCTURE BASED SERVICE AUTHENTICATION METHOD AND SYSTEM

摘要

The present invention provides a method and system capable of confirming whether user authentication has been initiated by accessing a correct service server by a currently used user terminal. More specifically, according to the present invention, when the user ID is input to the service server for user authentication after accessing the service of the user terminal, the service server generates a service authentication value and presents it to the user terminal, and then generates a service authentication value or authentication value. Provides a method of encrypting possible related values with a PKI-based key and transmitting them to an authentication terminal. Thereafter, the value transmitted from the service is decrypted by verifying the value with the PKI-based key stored in the authentication terminal in advance, and the service confirmation value or the service confirmation value based on the related value is generated and displayed to the user. It provides a service authentication method and system that enables a user to directly check whether a connection with a service server is connected with the naked eye.