Identity authentication method and device

Abstract

The invention discloses an identity authentication method, which comprises the following steps that: an authentication access controller (AAC) receives an identity ciphertext message sent by a request device REQ, and the identity ciphertext message comprises a first identity information ciphertext generated by the REQ by using a public key of an encryption certificate to encrypt information including identity information of the REQ and a first identity key, the AAC sends a first authentication request message comprising a first identity information ciphertext and an identity authentication code of the AAC to a first authentication server, and the first authentication server verifies the identity legality of the AAC according to the identity authentication code of the AAC to generate first authentication result information; and the second authentication server verifies the identity legality of the REQ according to the digital certificate of the REQ to generate second authentication result information, the REQ and the AAC respectively obtain the authentication result information of the opposite end, bidirectional identity authentication is realized, and the entity sensitive information is transmitted in a ciphertext form, so that the entity security is guaranteed.

Description

technical field [0001] The present application relates to the technical field of network communication security, and in particular, to an identity authentication method and device. Background technique [0002] At present, communication networks usually require two-way identity authentication between users and network access points to ensure that legitimate users can access legitimate networks. The form of pre-shared key, but in some scenarios in practical applications, one end uses a digital certificate as an identity credential, and the other end uses a pre-shared key as an identity credential, which poses a challenge to the entity identity authentication mechanism. [0003] In addition, in the process of identity authentication, the identity information of the entity is directly exposed, and sometimes, the identity information of the entity contains some private or sensitive information of the entity, such as ID number, home address, bank card information, etc. If someon...

AI Technical Summary

Problems solved by technology

[0002] At present, communication networks usually require two-way identity authentication between users and network access points to ensure that legitimate users can access legitimate networks. However, in some scenarios in practical applications, one end uses a digital certificate as an identity certificate and the other end uses a pre-shared key as an identity certificate, which poses a challenge to the entity identity authentication mechanism

[0003] In addition, in the identity authentication process, the identity information of the entity is directly exposed, and sometimes, the identity information of the entity contains some private or sensitive information of the entity, such as ID number, home address, bank card information, etc., if attacked If the attacker intercepts and then uses it to engage in illegal activities, the consequences will be unimaginable. How to complete entity identity verification without revealing sensitive identity information has become a top priority

Images