IPA security certification-based access control system

Abstract

The invention discloses an IPA security certification-based access control system. When a radio frequency (RF) card closes to a card reader, a singlechip accesses the data in the card by a RF interface module in a random ciphertext manner, and data are encrypted and sent in accordance with an IPA-based combined public key sent by a management computer, the management computer decrypts and stores the received data by using a corresponding combined private key. The access control system has the advantages that RF card information is read in the random ciphertext manner, access control information is encrypted by an elliptic function encryption algorithm encrypts and a public / private key pair are generated on the basis of IPA, thereby improving data security transmission, realizing the elimination of potential safety hazards from three aspects of the RF card, an access card reader and a data transmission network; an IPA-based security authentication system is adopted to produce and manage keys, a lot of public / private key pairs are generated, thereby solving the problem that the reusing of a pair of key reduces security.

Description

technical field [0001] The invention relates to an access control system, in particular to an access control system based on IPA (Identity-based Public-key Authentication) security authentication. Background technique [0002] The application of the access control management system has been very extensive, and its security risks have attracted increasing attention. For departments with high security requirements, once a problem occurs, the consequences will be very serious. [0003] The existing access control system mainly has the following problems: [0004] (1) The access control card is copied (that is, cloned): Most of the existing access control machines use such as MF1, T5557 and HITAG-2. In 2007, Karsten Nohl et al. provided a cracking method for the MF1 card, making it possible to clone the MF1 card. However, T5557 and HITAG-2 are directly transmitted in plain text, which is less secure. [0005] (2) The data is stolen after the card reader is stolen: the single...

AI Technical Summary

Problems solved by technology

While T5557 and HITAG-2 are directly transmitted in plain text, the security is lower

[0005] (2) The data is stolen after the card reader is stolen: the single-chip microcomputer and memory in the card reader usually contain IC card information and access control information. If it is stolen, it is very easy to steal information from it and clone the access control card

[0006] (3) The data of the communication line is eavesdropped: the usual access control system does not introduce data encryption measures, if criminals monitor the communication line, it is easy to obtain confidential information

However, because the USB Key must be in electrical contact, it is not convenient for actual use

Invention 200610098625.1 "Application method of IC card in access control system based on financial norms" adopts contact IC card, whose specification is proprietary to the banking system, and the data format is confidential, which is not only inconvenient to use but also difficult to apply in systems other than banks

Images