Identity authentication method and device

Abstract

The invention discloses an identity authentication method, which comprises the following steps that: an authentication access controller (AAC) receives an identity ciphertext message sent by request equipment (REQ), the AAC sends a first authentication request message to a trusted first authentication server, and the first authentication request message comprises a digital certificate of the REQ and an identity authentication code of the AAC; the first authentication server verifies an identity authentication code of the AAC, the second authentication server trusted by the REQ verifies legality of a digital certificate of the REQ, the AAC receives a first authentication response message which is sent by the first authentication server and carries authentication results of the AAC and the REQ, and the AAC and the REQ respectively obtain the authentication results of opposite entities to realize bidirectional identity authentication; and entity sensitive information is transmitted between the REQ and the AAC in a ciphertext form, so that the security of the entity is guaranteed.

Description

technical field [0001] The present application relates to the technical field of network communication security, and in particular, to an identity authentication method and device. Background technique [0002] At present, communication networks usually require two-way identity authentication between users and network access points to ensure that only legitimate users can communicate with legitimate networks. The form of pre-shared key is used between them, but in some scenarios in practical applications, one end uses a digital certificate as an identity credential, and the other end uses a pre-shared key as an identity credential. challenge. [0003] In addition, in the process of identity authentication, the identity information of the entity is directly exposed, and in some cases, the identity information of the entity contains some private or sensitive information of the entity, such as ID number, home address, bank card information, etc., if it is attacked If someone ...

AI Technical Summary

Problems solved by technology

[0002] At present, communication networks usually require two-way identity authentication between users and network access points to ensure that only legitimate users can communicate with legitimate networks. However, in some practical applications, one end uses a digital certificate as an identity certificate, and the other end uses a pre-shared key as an identity certificate. This poses a challenge to the entity identity authentication mechanism. challenge

[0003] In addition, in the identity authentication process, the identity information of the entity is directly exposed, and sometimes, the identity information of the entity contains some private or sensitive information of the entity, such as ID number, home address, bank card information, etc., if attacked If the attacker intercepts and then uses it to engage in illegal activities, the consequences will be unimaginable. How to complete entity identity verification without revealing sensitive identity information has become a top priority

Images