Identity authentication method based on public key certificate and system thereof

Abstract

The invention relates to an identity authentication method based on a public key certificate and a system thereof; the authentication method comprises the following steps: 1) an authentication access controller (AAC) sends an authentication activation packet to a requester (REQ); 2) after receiving the authentication activation packet, the REQ sends an access authentication request packet to the AAC; 3) after receiving the access authentication request packet, the AAC sends a certificate authentication request packet to an authentication server (AS); 4) after receiving the certificate authentication request packet, the AS sends a certificate authentication response packet to the AAC; 5) after receiving the certificate authentication response packet, the AAC sends an access authentication response packet to the REQ; and 6) after receiving the access authentication response packet, the REQ sends an access authentication confirmation packet to the AAC.

Description

technical field [0001] The present invention relates to an identity authentication method and system based on public key certificates, in particular to a TePA (Tri-element Peer Authentication) mechanism based on triple-element peer authentication when a user accesses the network in a wired local area network LAN (Local Area Network) Identification method and system thereof. Background technique [0002] Ternary peer-to-peer authentication TePA technology is a technical idea and framework method for peer-to-peer authentication between users and networks proposed for the first time in my country. This technology defines a three-element entity authentication architecture. Based on the idea of ​​peer-to-peer authentication, user Two-way peer-to-peer authentication with the network. [0003] In the wired LAN, IEEE implements the security of the link layer by enhancing the security of IEEE802.3. The typical security access architecture protocol IEEE 802.1x is adopted. The basic me...

AI Technical Summary

Problems solved by technology

This mode can only realize the legitimacy authentication of the terminal identity by the network, but it cannot meet the legitimacy authentication requirements of the terminal for accessing the network, and cannot realize two-way authentication between the terminal and the network

The terminal cannot confirm the identity of the access point device. Even if the security loopholes are compensated by adding security patches and other measures in the later stage of this security architecture, it cannot completely solve security problems such as man-in-the-middle attacks and terminal access to illegal networks.

This type of security access technology protocol has been used until now, which has caused serious obstacles to the development of the industry

Images