Equipment authentication method, service access control method, equipment and storage medium

Abstract

The invention provides an equipment authentication method, a service access control method, equipment and a storage medium. According to the equipment authentication method, authentication request equipment issues an authentication request transaction in a distributed account book, authentication response equipment reads the authentication request transaction in the distributed account book and performs authentication, so that a third-party authentication center does not need to manage or coordinate equipment participation in an authentication handshake process, the deployment overhead of theauthentication system is reduced, and the authentication and access service control efficiency is improved.

Description

technical field [0001] The present invention relates to the technical field of device authentication, in particular to a method for device authentication, a method for service access control, a device, and a storage medium. Background technique [0002] Authenticating devices is critical to securing information access and transactions. For example, the security service in the industrial monitoring system and the security service in the environmental monitoring system usually need to identify a legitimate user or device, so as to allow the legitimate user or device to access to obtain a large amount of monitoring terminal data or measurement terminal data (e.g. cameras, air / water quality measurement sensors). For another example, in a home or office smart system, it is necessary to identify a legal user / device, so that the terminal can be controlled or terminal data can be accessed. The authentication methods in the prior art generally need to rely on a trusted third-party ...

AI Technical Summary

Problems solved by technology

The processing power of the third-party management server limits the authentication efficiency

With the increasing popularity of smart mobile terminals and the rapid development of Internet of Things (IOT, Internet of Things) technology, in a system containing a large number of mobile terminals or IOT devices, if each device needs to be verified by interacting with a third-party server, then The third-party server will become a performance bottleneck, so in many existing applications, only one-way authentication is performed, that is, the service providing device is authenticated, and the service requesting device is not authenticated

In addition, the CA in PKI requires real-name authentication of the terminal, and real-name authentication is usually not necessary in the IOT system, which brings additional overhead

[0004] The secure channel usually requires specific hardware support, for example, the device needs to install the Subscriber Identification Module (SIM, Subscriber Identification Module) of the mobile cellular network, or an encryption system that needs to be deployed in advance, thus increasing the deployment cost of the authentication system, so it is not suitable for large-scale scale application

Images