An Authentication Method Based on Public Key Encryption System

Abstract

The invention relates to an authentication method based on a public key encryption system, which is applied in environments such as instant message communication and network telephone, and includes identity authentication and generation of a shared session secret key. It mainly consists of three roles: sender A, receiver B, and key distribution center. During the execution of the protocol, the sender A and the receiver B complete the mutual identity authentication with the key distribution center and the mutual identity authentication between the sender A and the receiver B through the interaction with the key distribution center. During this period, sender A and receiver B respectively receive the shared session key generated by the key distribution center, and verify that the other party has also received the shared session key, so that the shared session can be used in the next stage of information interaction The secret key encrypts and decrypts the communication content. The invention fully satisfies the security requirements of the authentication protocol, can prevent old messages from being replayed, and resist identity masquerading attacks.

Description

technical field [0001] The invention relates to the technical fields of information security and network security, in particular to an authentication method based on a public key encryption system, which is suitable for identity authentication based on the public key encryption system and on this basis to carry out secure communication through a shared session key. Background technique [0002] The purpose of identity authentication is to realize the secure communication of participants in an unreliable communication environment. Due to the unreliability of the network environment, there are various attack methods, such as identity impersonation, old message replay, etc., which lead to analysis The complexity of designing an authentication protocol. Existing identity authentication methods, in order to prevent message replay and identity impersonation attacks, usually use time stamps, send random numbers to each other, add sender identity marks, etc., but time stamps have di...

AI Technical Summary

Problems solved by technology

[0002] The purpose of identity authentication is to realize the secure communication of participants in an unreliable communication environment. Due to the unreliability of the network environment, there are various attack methods, such as identity impersonation, old message replay, etc., which lead to analysis The complexity of designing an authentication protocol

Existing identity authentication methods, in order to prevent message replay and identity impersonation attacks, usually use time stamps, send random numbers to each other, add sender identity marks, etc., but time stamps have difficulty in time synchronization and require additional Cost; sending random numbers to each other usually leads to an increase in the number of message interactions, which increases the complexity of the protocol

Images