Authentication method, system, authentication server and terminal equipment

Abstract

The invention discloses an authentication method, a system, an authentication server and terminal equipment. The method comprises the following steps: sending a first identity abstract information request to the terminal equipment through a wireless access point; receiving the first identity abstract information response returned by the terminal equipment through the wireless access point, wherein the first identity abstract information response comprises first identity abstract information and initial random values, and the first identity abstract information is generated by the terminal equipment according to the terminal equipment information, user private information and the initial random values; generating first identity abstract verification information according to the initial random values, the terminal equipment information obtained in advance from the terminal equipment and the user private information; and comparing the first identity abstract information and the first identity abstract verification information to obtain authentication results, and returning the authentication results to the wireless access point. The technical scheme of the embodiment of the inventionimproves the safety of the network authentication.

Description

technical field [0001] The embodiments of the present invention relate to the technical field of communications, and in particular to an authentication method, system, authentication server, and terminal equipment. Background technique [0002] In the field of WLAN access authentication, digital certificates are usually used to authenticate clients accessing the LAN. Users who need to access the wireless local area network will apply to the authentication server for a digital certificate in advance through the terminal device. The digital certificate includes basic user information, public key information, digital signature issued by an authority, and certificate validity period. The digital certificate realizes the binding of user basic information and public key information, and also includes a digital signature issued by an authority. [0003] When the terminal device needs to access the wireless local area network, it will complete the certificate authentication process...

AI Technical Summary

Problems solved by technology

[0004] However, since a digital certificate is a file that can be stored and copied, in practical applications, if an illegal user illegally obtains a digital certificate by obtaining a mobile memory that stores a digital certificate or through network virus attacks, the illegal user can obtain The digital certificate pretends to be a legitimate user to pass the authentication of the authentication server, thereby reducing the security of network authentication; and in order to ensure the security of accessing the network, when it is stipulated that the legitimate user can only use the specified terminal equipment, the legitimate user can also obtain The digital certificate of the designated terminal device passes the authentication of the authentication server and accesses network resources on other devices other than the designated terminal device, which will also lead to a decrease in the security of network authentication

Images