The purpose of the authentication service is to ensure the reliability of information. The main methods to achieve identity authentication include passwords, digital certificates, authentication based on biometrics (such as fingerprints, voices, etc.).

1. Identity identification and authentication concepts:

Identity identification is a user’s unique biological characteristics or behavioral characteristics that can prove the user’s identity. This characteristic requires uniqueness, such as the user’s Biometric features such as fingerprints and retinas, and behavioral features such as voice, handwriting, and signature; or information he can provide to identify himself, such as passwords, passwords, etc.

In comparison, the latter type has a lower security factor, the password is easily forgotten or stolen, and the identity may be impersonated.

Authentication is the process of verifying a subject on the network to verify that the user's identity matches who they claim to be.

2. The process of identity authentication:

The process of identity authentication varies according to the identity authentication method and is divided into:

Identity authentication based on information secret; Identity authentication based on physical security; identity authentication based on behavioral characteristics; identity authentication using digital signature methods.

Identity authentication based on information secrets generally refers to verification that relies on possession of things or information. It is divided into password authentication, one-way authentication and two-way authentication.

Disadvantages of password authentication: Its security is only based on the confidentiality of user passwords, and user passwords are generally short and easy to guess, so this solution cannot resist password guessing attacks. An attacker may eavesdrop on the communication channel or conduct network snooping. The clear text transmission of the password allows the attacker to obtain the user's password during the password transmission process, and the system will be breached.