The Design And Implementation Of Hue-Cloud Identity Authentication System

With the rapid development of mobile Internet,all kinds of banks have laid emphasis on the field of Internet finance.However,under the complicated Internet security situation,the more convenient the mobile payment products are,the more serious the potential security risks exist.Driven by tremendous economic interests,unscrupulous elements take the risk and steal,sell and use data such as theft,caching and fraud to gain personal privacy information of users and directly threaten the security of user accounts and funds.Therefore,identity authentication in the protection of mobile payment security,to prevent telecommunications fraud become an insurmountable key link.In this context,the People's Bank of China No.261 issued last year stipulates that banks must use the"safe and reliable payment order verification method" that is,identity authentication technology to protect people's property safety and lawful rights and interests.However,small and medium-sized banks have limited technology accumulation and most need to integrate third-party identity authentication technology into their banking systems.However,the traditional authentication methods are difficult to compromise with the security level,user experience and cost,especially in the authentication of mobile users under the background of the rapid development of mobile Internet.Traditional authentication is even more difficult.Therefore,designing and implementing an identity authentication system with high security,good user experience,low use cost,and convenient integration of small and medium-sized banks has become an urgent need in the field of Internet finance.This thesis analyzes the status quo of PKI system and identity authentication technology.Based on the related technologies of cryptography,a HUE-Cloud identity authentication system is designed and implemented on the basis of a company's patented technology.The main work of this thesis is as follows:(1)Analyzed the PKI system framework and the traditional authentication technologies and their advantages and disadvantages.According to the demand of small and medium-sized banking system,this thesis summarizes the functional requirements and non-functional requirements of the system,and gives the architecture of the HUE-Cloud authentication system;Taking into account the requirements of the system performance in high concurrency environments,this thesis designs and implements the high-performance storage architecture of the system by comprehensively using technologies such as Nginx load balancing,Redis cache and asynchronous cache queue;(2)Analyzed cryptography related technologies,including encryption algorithm,One-way Hash Function,MAC,Digital Signature and Pseudo Random Number Generator,and applied to solve the problems in the system.Such as,the confidentiality of the message,the confidentiality of the secret key,message integrity verification,validation and prevention of denial and key authentication;(3)Designed and implemented the password system and user authentication process of the identity authentication system by using the SM2/SM3/SM4 algorithm,the gesture check and the TS code check technology implemented by an enterprise according to the national standard;(4)The system has been tested and analyzed.The experimental results show that user authentication of key business links of banking system can be completed quickly and safely with the help of mobile phone.Moreover,the system has achieved the balance between the three in terms of safety,user experience and cost,and has high engineering application value.