Database multi-authentication method and system, terminal, and storage medium

1. A database multi-authentication method, applied to a server, comprising:

initializing a hardware authentication certificate carrier by means of a programming interface,

and storing a public key of the hardware authentication certificate carrier and a user certificate public name, the hardware authentiction certificate carrier is a hardware device with a Universal Serial Bus (USB) interface;

taking the user certificate public name as a database user name, and generating a standard message digest value of the database user name;

receiving an authentication request sent from a client and verifying a user certificate in the authentication request, and returning an initial random number to the client after the verification is passed; and

receiving a signature random number sent from the client, and using the public key to decrypt the signature random number to obtain a random number; in response to determining that the random number is consistent with the initial random number, acquiring a message digest value of a client user name, and in response to determining that the message digest value of the client user name is consistent with the standard message digest value, determining that the client passes the authentication, wherein the client submits, via the USB interface, the initial random number sent by the server to the hardware authentication certificate carrier for signature, and then send the signate random number to the server for authentication.

2. The method as claimed in claim 1 , wherein initializing the hardware authentication certificate carrier by means of a programming interface comprises:

inputting user information into an authentication management function of the hardware authentication certificate carrier, and logging in to the authentication management function;

generating a key pair comprising a private key and a public key by using the authentication management function, and storing the private key into a storage medium of the hardware authentication certificate carrier;

generating a user certificate by using a certificate generating tool according to the key pair;

specifying an administrator account of the hardware authentication certificate carrier, and setting a maximum number of attempts for an administrator and a user to log in to the authentication management function.

3. The method as claimed in claim 1 , wherein the authentication request sent by the client comprises:

identifying, by the client, the hardware authentication certificate carrier;

inputting, by the client, the user information into the hardware authentication certificate carrier to log in to the hardware authentication certificate carrier;

reading, by the client, the user certificate from the hardware authentication certificate carrier, and generating the authentication request according to the user certificate.

4. The method as claimed in claim 1 , wherein receiving the authentication request sent from the client, verifying the user certificate in the authentication request, and returning the initial random number to the client after the verification is passed comprise:

extracting a user certificate from the authentication request, and judging whether the user certificate matches local stored legitimate user certificate;

in response to determining that the user certificate matches local stored legitimate user certificate, generating a random number with a specified number of digits, and sending the random number to the client, and storing the random number into server as an initial random number; and

in response to determining that the user certificate does not match local stored legitimate user certificate, determining that an authentication fails.

5. The method as claimed in claim 1 , wherein in response to determining that the random number is consistent with the initial random number, acquiring the message digest value of the client user name comprises:

after verification of consistency between the random number and the initial random number is passed, acquiring a user certificate public name read by the client from the hardware authentication certificate carrier;

calculating a message digest value of the user certificate public name by using a message digest algorithm.

6. The method as claimed in claim 1 , wherein initializing the hardware authentication certificate carrier by means of a programming interface comprises:

dividing a sizes of a public storage area and a hidden storage area in the hardware authentication certificate carrier.

7. A terminal, comprising a memory and one or more processors, wherein the memory stores computer readable instructions, when executed by the processors, make the one or more processors to:

initialize a hardware authentication certificate carrier by means of a programming interface, and store a public key of the hardware authentication certificate carrier and a user certificate public name, the hardware authentiction certificate carrier is a hardware device with a Universal Serial Bus (USB) interface;

take the user certificate public name as a database user name, and generate a standard message digest value of the database user name;

receive an authentication request sent from a client and verify a user certificate in the authentication request, and return an initial random number to the client after the verification is passed; and

receive a signature random number sent from the client, and use the public key to decrypt the signature random number to obtain a random number; in response to determining that the random number is consistent with the initial random number, acquire a message digest value of a client user name, and in response to determining that the message digest value of the client user name is consistent with the standard message digest value, determine that the client passes the authentication, wherein the client submits, via the USB interface, the initial random number sent by a server to the hardware authentication certificate carrier for signature, and then send the signate random number to the server for authentication.

8. The terminal as claimed in claim 7 , the one or more processors are configured to:

input user information into an authentication management function of the hardware authentication certificate carrier, and log in to the authentication management function;

generate a key pair comprising a private key and a public key by using the authentication management function, and store the private key into a storage medium of the hardware authentication certificate carrier;

generate a user certificate by using a certificate generating tool according to the key pair;

specify an administrator account of the hardware authentication certificate carrier, and set a maximum number of attempts for an administrator and a user to log in to the authentication management function.

9. The terminal as claimed in claim 7 , wherein the authentication request sent by the client comprises:

identifying, by the client, the hardware authentication certificate carrier;

inputting, by the client, the user information into the hardware authentication certificate carrier to log in to the hardware authentication certificate carrier;

reading, by the client, the user certificate from the hardware authentication certificate carrier, and generating the authentication request according to the user certificate.

10. The terminal as claimed in claim 7 , the one or more processors are configured to:

extract a user certificate from the authentication request, and judge whether the user certificate matches local stored legitimate user certificate;

in response to determining that the user certificate matches local stored legitimate user certificate, generate a random number with a specified number of digits, and send the random number to the client, and store the random number into server as an initial random number; and

in response to determining that the user certificate does not match local stored legitimate user certificate, determine that an authentication fails.

11. The terminal as claimed in claim 7 , the one or more processors are configured to:

after verification of consistency between the random number and the initial random number is passed, acquire a user certificate public name read by the client from the hardware authentication certificate carrier;

calculate a message digest value of the user certificate public name by using a message digest algorithm.

12. The terminal as claimed in claim 7 , the one or more processors are configured to:

divide a sizes of a public storage area and a hidden storage area in the hardware authentication certificate carrier.

13. A non-transitory computer readable storage medium, storing computer readable instructions, wherein the computer readable instructions, when executed by one or more processors, make the one or more processors to:

initialize a hardware authentication certificate carrier by means of a programming interface, and store a public key of the hardware authentication certificate carrier and a user certificate public name, the hardware authentiction certificate carrier is a hardware device with a Universal Serial Bus (USB) interface;

take the user certificate public name as a database user name, and generate a standard message digest value of the database user name;

receive an authentication request sent from a client and verify a user certificate in the authentication request, and return an initial random number to the client after the verification is passed; and

receive a signature random number sent from the client, and use the public key to decrypt the signature random number to obtain a random number; in response to determining that the random number is consistent with the initial random number, acquire a message digest value of a client user name, and in response to determining that the message digest value of the client user name is consistent with the standard message digest value, determine that the client passes the authentication, wherein the client submits, via the USB interface, the initial random number sent by a server to the hardware authentication certificate carrier for signature, and then send the signate random number to the server for authentication.

14. The non-transitory computer readable storage medium as claimed in claim 13 , the one or more processors are configured to:

input user information into an authentication management function of the hardware authentication certificate carrier, and log in to the authentication management function;

generate a key pair comprising a private key and a public key by using the authentication management function, and store the private key into a storage medium of the hardware authentication certificate carrier;

generate a user certificate by using a certificate generating tool according to the key pair;

specify an administrator account of the hardware authentication certificate carrier, and set a maximum number of attempts for an administrator and a user to log in to the authentication management function.

15. The non-transitory computer readable storage medium as claimed in claim 13 , wherein the authentication request sent by the client comprises:

identifying, by the client, the hardware authentication certificate carrier;

inputting, by the client, the user information into the hardware authentication certificate carrier to log in to the hardware authentication certificate carrier;

reading, by the client, the user certificate from the hardware authentication certificate carrier, and generating the authentication request according to the user certificate.

16. The non-transitory computer readable storage medium as claimed in claim 13 , the one or more processors are configured to:

extract a user certificate from the authentication request, and judge whether the user certificate matches local stored legitimate user certificate;

in response to determining that the user certificate matches local stored legitimate user certificate, generate a random number with a specified number of digits, and send the random number to the client, and store the random number into server as an initial random number; and

in response to determining that the user certificate does not match local stored legitimate user certificate, determine that an authentication fails.

17. The non-transitory computer readable storage medium as claimed in claim 13 , the one or more processors are configured to:

after verification of consistency between the random number and the initial random number is passed, acquire a user certificate public name read by the client from the hardware authentication certificate carrier;

calculate a message digest value of the user certificate public name by using a message digest algorithm.

18. The non-transitory computer readable storage medium as claimed in claim 13 , the one or more processors are configured to:

divide a sizes of a public storage area and a hidden storage area in the hardware authentication certificate carrier.