Patent ID: 9667626
Date: 2017-05-30
CPC Classifications: G06F,H04L

Claim:
1. A network authentication method to be implemented using a network server, a network authentication device and a user end for authenticating the user end, the user end storing a terminal program and including a plurality of hardware components each of which has a unique identification code, the network authentication method comprising the steps of: a) storing, by the network authentication device, hardware information associated with the identification codes of the hardware components of the user end; b) receiving, at the network server, a login request from the user end for accessing the network server using a web browser through a first communication channel that is established between the web browser and the network server; c) after step b), redirecting, by the network server, the user end for connecting with the network authentication device through a second communication channel that is separate from the first communication channel, that is established by the user end executing the terminal program for communication between the terminal program and the network authentication device, and that is exclusive for the user end; d) executing, by the user end, the terminal program for scanning the hardware components thereof to obtain the identification codes of the hardware components of the user end, for establishing a hardware list according to the identification codes of the hardware components thus obtained, and for automatically sending to the network authentication device verification data that is associated with the hardware list without user operation; e) verifying, by the network authentication device, identity of the user end based on relationship between the verification data received from the user end in step d) and the hardware information stored in step a; f) generating, by the network authentication device, a key according to the hardware information stored therein, and to directly send the key to the user end and the network server without encrypting the key; g) when the user end intends to conduct an electronic transaction with the network server, h) comparing, by the network server, the first digital signature from the user end with the second digital signature generated thereby, and to determine that the transaction data was not tampered during transmission from the user end to the network server when the first digital signature conforms with the second digital signature.