Identity authentication and secret key negotiation method and device in communication network

Abstract

In the prior art, PKI which is taken as a safety settling plan is widely applied in the internet (IT network) field. But PKI has the disadvantages of high requirement to the capability of the communication equipment and consuming considerable system resource for managing and maintaining the digital certificate and can not adapted for the requirement of the communication network which is fusing. The aim of the invention is to provide a technical scheme which specially actualizes the cryptographic technique based on identity to the communication network. In particular, a management device is leaded into for generating and managing a private key based on the characteristic information of the communication equipment. The communication equipment uses the public key which is generated based on the corresponding characteristic information, the private key that is obtained based on the corresponding characteristic information and preferably the conversation key that is obtained based on the keys for the safety communication between other communication equipments.

Description

technical field [0001] The present invention relates to communication networks, and more particularly to secure communication in communication networks. Background technique [0002] PKI (Public Key Infrastructure) is a standard-compliant security solution that uses public key encryption technology to provide a secure basic platform for e-commerce. It can provide encryption, digital signature and other cryptographic services for all network applications and the necessary Key and certificate management system. Users can use the platform provided by PKI to conduct secure electronic transactions, communications and various activities on the Internet. [0003] The core element of PKI is digital certificate, its core executor is CA (Certification Authority), and its basic technology includes encryption, digital signature, data integrity mechanism, digital envelope, double digital signature, etc. [0004] Specifically, in the PKI mechanism, the public-private key pair can be gen...

AI Technical Summary

Problems solved by technology

Therefore, people began to pay attention to identity-based cryptography (Identity Based Cryptography, an asymmetric key encryption algorithm), but so far, identity-based cryptography has only one concept and some algorithms, which cannot be practically applied yet.

Images