Method for implementing network access authentication

Abstract

The invention discloses a method for realizing network access authentication, the key of which is that in the access request sent by the access device to the network access authentication device, the encryption public key pair of the anonymous qualification certificate and the access The information encrypted together with the identity of the access device, and the zero-knowledge proof information proving the legality of the anonymous qualification certificate; the network access authentication device confirms that the anonymous qualification certificate applied by the access device has not been revoked according to the received information, and verifies After the zero-knowledge proof is correct, the access device is considered legal and the access device is allowed to access the network. Applying the present invention, the network access authentication device can confirm the legitimacy of the access device without knowing the real identity of the access device. In this way, it not only ensures the security of the device accessing the network, but also hides the identity of the access device. identity of. Therefore, the access device is anonymous and unconnectable, which meets the user's requirements.

Description

technical field [0001] The invention relates to the technical field of network access authentication, in particular to a method for realizing network access authentication. Background technique [0002] At present, the network access authentication device performs authentication processing on devices to be connected to the network mainly based on the following technical protocols: [0003] (1) Password authentication protocol; [0004] (2) Based on the shared key and challenge response protocol; [0005] (3) Based on the dynamic one-time password protocol; [0006] (4) Authentication protocol based on public key system. [0007] The idea of ​​all the above authentication processing is: network access authentication devices, such as firewalls, routers, authentication servers, etc., determine whether the access is allowed by judging whether the device to be accessed has the password and / or key required by the authentication protocol Device access. Applying the above acces...

AI Technical Summary

Problems solved by technology

[0008] With the development of e-commerce, e-commerce has been more and more integrated into people's lives. In e-commerce, such as in e-auctions, e-elections and other activities, users usually do not want to expose themselves when they use access devices to access the network. It can be seen that the existing network access authentication methods cannot meet this requirement at all.

Images