An http-digest-like aka identity authentication system and method based on a symmetric key pool

Abstract

The invention discloses an HTTP-Digest type AKA identity authentication method and system based on a symmetric key pool. When performing authentication, a client initiates a registration request to a server, and the registration request contains a first random number; A question message, the question message is generated by the server in response to the registration request, the question message includes a message authentication code, AMF, and a second random number used to generate a negotiation key, and the second random number adopts ciphertext form, the anonymous key used to encrypt the second random number is generated by the server using the first random number; use the first random number and message authentication code to verify the question message in turn, and generate a response after the verification is passed message; sending the response message to the server, and receiving a registration result from the server for the response message. The invention adopts two-way authentication, further improves security, simplifies cumbersome message verification steps, and reduces the risk of key being cracked.

Description

technical field [0001] The invention relates to the technical field of secure communication, in particular to an algorithm of end-to-end authentication and key agreement, that is, how two communication parties perform two-way identity authentication and take out the same key from a symmetric key pool. Background technique [0002] Authentication, that is, identity authentication is the basic technology to achieve information security. The system checks the user's identity to confirm whether the user has access and use rights to certain resources, and can also perform identity authentication between systems. [0003] The security issues of mobile communications are facing severe challenges, and more and more attention has been paid to them. As a relatively independent security system, the communication between the client and the server must be under security protection at all times, and all clients must be authenticated before using the services of the network core control pl...

AI Technical Summary

Problems solved by technology

[0008] 1. Although the patent document with the publication number CN106357649A uses a quantum key card as a symmetric key pool, its identity authentication is one-way, and there are large security risks

Moreover, the key used in this invention does not distinguish between communication modes, and is too single. In the case of key leakage, all messages will be cracked

[0009] 2. The existing HTTP Digest authentication method using the AKA mechanism uses very limited keys and negotiated keys, and the security performance is not high

The random number RAND used for key agreement is exposed in communication, which will pose a threat to the security of encrypted communication to a certain extent.

Images