Entity authentication method and device

Abstract

The invention relates to an entity identification method and device. The method comprises the steps that an entity A generates a random number N and transmits the random number N to an entity B; the entity B generates random numbers N and ZSEED, a secret key MKA||KEA||KIA, a cryptograph EncData and a message identification code MAC are calculated, and N||N||EncData||MAC is transmitted to the entity A to be identified; the entity A generates a random number ZSEED, a cryptograph EncData, a message identification code MAC, a shared secret Z, a main secrete key MK and a message identifier MacTag are calculated, and N||N||EncData||MAC||MAC|| MacTag is transmitted to the entity B to be identified; the entity B calculates Z and MK and calculates MacTag and the MacTag is compared with the received MacTag, and the entity A is considered to be legal if the MacTag and the received MacTag are equal; the entity B calculates a message identifier MacTag and transmits the MacTag to the entity A; and the entity A calculates MacTag and the MacTag is compared with the received MacTag, and the entity B is considered to be legal if the MacTag and the received MacTag are equal. Identification between network entities can be realized and the main secret key is established, and identity of the opposite side can be confirmed simultaneously.

Description

technical field [0001] The invention belongs to the technical field of network security, in particular to an entity authentication method and device. Background technique [0002] For communication networks, such as local area network WLAN, wireless sensor network WSN, near field communication NFC, radio frequency identification RFID, personal area network WPAN, etc., they are vulnerable to forgery, eavesdropping, replay and other attacks during communication, so it must be solved before communication Identity authentication between the two parties in communication to ensure the legitimacy of the identities of the two parties in communication. At present, in authentication schemes based on cryptographic algorithms, especially those based on symmetric cryptographic algorithms, the identities of both parties are usually not confirmed during the authentication process, so even if the identity authentication passes, it can only be determined that the other party has a shared sec...

AI Technical Summary

Problems solved by technology

At present, in authentication schemes based on cryptographic algorithms, especially those based on symmetric cryptographic algorithms, the identities of both parties are usually not confirmed during the authentication process, so even if the identity authentication passes, it can only be determined that the other party has a shared secret , but in fact it is still impossible to determine who the other party is, and there are certain security risks

Images