Mobile phone token MFA scheme based on visual password

The invention provides a mobile phone token MFA scheme based on a visual password, and the scheme sequentially comprises a secret key generation method, an identity authentication method and a secretkey replacement method: in a user registration stage, access control equipment generates a share1 image for a user as a user secret key, and the access control equipment stores the secret key; in an MFA identity authentication stage, a user uses a static password to carry out identity authentication, after the authentication is passed, access control equipment randomly generates a dynamic password, the access control equipment generates a ciphertext image sharek according to a rule, the user uses a mobile phone to shoot the ciphertext image sharek, and images of a share1 and the sharek are superposed. In the authentication process, the mobile phone does not need to establish network connection with the access control equipment, time synchronization between the mobile phone and the access control equipment is not n