Authing 令牌

Product introduction:
Authing Token is a dynamic token security application developed by Beijing Steam Memory Information Technology Co., Ltd. for mobile devices. It is an important part of Authings cloud-native identity management product.

Product principle:
The Authing token is based on OTP technology (One-time Passward, also known as dynamic password), which is an unpredictable random combination of numbers generated every 30 seconds according to a special algorithm. Each password can only be used once. When the user performs identity authentication, on the basis of entering the account number and password, he also needs to enter the dynamic password generated by this application to complete the login.

Use scene:
Authing tokens can be used in conjunction with Authing cloud native identity management products, providing enterprise employees and end users with a simple, convenient, high-security, stable, and low-cost two-factor authentication solution.

Certification process:
1. The user performs the login process of account password, SMS verification code, and email verification code on the web or mobile login service interface provided by Authing;
2. When the user logs in through the normal way, the OTP authentication dialog box pops up on the login interface, requiring the user to enter a dynamic password belonging to the account;
3. The user opens the Authing token APP to get the current Dynamic Cipher;
4. The user enters the identity information and dynamic password in the identity authentication dialog box;
5. Authing server level accepts information, generates algorithm results based on user information and time synchronization, and compares the dynamic passwords displayed on the client side to judge the legitimacy and authenticity of the identity;
6. Determine whether the user can successfully log in to the relevant application according to the authentication result.

Instructions for use:
1. Scan the QR code for token related information
On the application homepage, click the "Scan Code" button in the upper right corner, and enter the relevant account info by scanning the QR code containing the account info
2. View and copy the password:
On the application homepage, view the current dynamic password, click the relevant password, and the copying operation can be completed.
3. View, edit and delete token information operations:
On the application homepage, click the "Settings" button in the upper right corner, switch the page to the editing state, and click Edit the relevant password to enter the "Token Details" page. The account name and application name can be customized and modified. At the same time, you can view the number of keys, token interval, encryption algorithm and issuer of the token.