Read "Graphical http"--(Authentication of authenticated access user)

• Write in front

The authentication mechanism ensures that specific resources are accessible to specific (authenticated) users. Thus ensuring the confidentiality of resources.

• Body

1, why to certification? What is the certification medium?

The purpose of authentication is to confirm the identity of the visitor and to ensure the private nature of the resource (only certain authenticated users can operate the specific resources);

It is generally used for certification in this respect:

A, password

b, dynamic tokens (such as: SMS Verification Code)

C, digital certificate (into a third-party audit of the digital certificate)

D, biometric authentication (e.g. fingerprint)

E, IC card, etc.

2. Authentication method used by HTTP

2.1, basic certification (base certification)

Basic authentication is not used for high security levels and is currently used relatively infrequently

2.2, Digest certification (Abstract certification)

2.3. SSL Authentication

Using SSL client authentication, can evade the user's password and ID to steal the information after stealing

2.3.1, authentication steps based on SSL client authentication

A, the client must first install the Authenticated SSL client certificate

b, when the server receives a request that requires authentication, the response tells the client that a client certificate needs to be provided

C, after the client receives the response, sends the certificate to the server

D, the server verifies the validity of the certificate, if valid, sends the public key to the client, and then carries on the HTTPS encrypted communication

2.3.2, SSL client Authentication with two-factor authentication

A. Confirm client computers with SSL client authentication

b, through the form authentication (password Authentication) to confirm the operation of the user's personal information

2.3.3, SSL client authentication is required to pay the usage fee

• Exchange Learning

I have limited ability. If there is a mistake, look treatise.

2017-10-27

In Changsha

Read "Graphical http"--(Authentication of authenticated access user)