Identity authentication method and device

Abstract

The invention discloses an identity authentication method, which comprises the following steps that: an authentication access controller (AAC) receives an identity ciphertext message which is sent by request equipment REQ and comprises an REQ identity identifier ciphertext and an identity authentication code, decrypts the identity identifier ciphertext by using a message encryption key to obtain an identity identifier of the REQ, and sends a first authentication request message to a trusted first authentication server, and receiving a first authentication response message which is sent by the first authentication server and comprises first authentication result information, a first message authentication code of the second authentication server, second authentication result information and a first digital signature of the first authentication server, and obtaining an identity authentication result of the REQ by the AAC according to the message, and a third authentication response message including own authentication result information is sent to the REQ, and the REQ acquires the identity authentication result of the AAC according to the message, so that bidirectional identity authentication is realized.

Description

technical field [0001] The present application relates to the technical field of network communication security, and in particular, to an identity authentication method and device. Background technique [0002] At present, communication networks usually require two-way authentication between users and network access points to ensure that legitimate users can communicate with legitimate networks. In the existing entity authentication scheme, the identity of the entity is either in the form of a digital certificate or a pre-shared key. The situation where the other end uses the pre-shared key as the identity credential presents a challenge to the entity identity authentication mechanism. [0003] In addition, in the process of identity authentication message transmission, the identity information of the entity is often directly exposed, and the identity information of the entity usually includes private or sensitive information, such as ID number, home address, bank card info...

AI Technical Summary

Problems solved by technology

In the existing entity authentication schemes, the identity of the entity is either in the form of a digital certificate or a pre-shared key. The other end uses the pre-shared key as the identity certificate, which poses a challenge to the entity identity authentication mechanism

[0003] In addition, in the process of identity authentication message transmission, the identity information of the entity is often directly exposed, and the identity information of the entity usually includes private or sensitive information, such as ID number, home address, bank card information, geographic location information or organization Information, etc., if intercepted by attackers and used for illegal activities, the consequences will be unimaginable. How to complete entity identity authentication without revealing identity-sensitive information has become a top priority

Images