Identity authentication method, system and equipment in EAP (Extensible Authentication Protocol) authentication

Abstract

The embodiments of the present invention disclose a method, system and device for an identity authentication in the Extensible Authentication Protocol (EAP) authentication. The method includes: receiving an EAP message sent from a client, and obtaining the authentication identity, the random number, the public key and the signature information of the client which are carried in the EAP message; performing authentications for the authentication identity and the signature information of the client according to an authentication identity generation algorithm, the random number and the public key. By using the embodiments of the present invention, the stealing of the authentication identity can be prevented by utilizing the binding technique between the public key and the EAP authentication identity (ID), which thoroughly avoids that attackers filch or steal the authentication identities of other users.

Description

technical field [0001] The present invention relates to the field of communication technology, in particular to an identification authentication method, system and equipment in EAP authentication. Background technique [0002] EAP (Extensible Authentication Protocol, Extensible Authentication Protocol) is an extensible framework for providing network access authentication, and can support different authentication methods. EAP is generally carried on the second layer of the Internet protocol. Users can only conduct legal network communication after completing the authentication stipulated by EAP. Users who cannot be authenticated correctly cannot perform data communication. Many networks use EAP as a standard protocol for access authentication, such as 802.11, WIMAX (Worldwide Interoperability for Microwave Access, Worldwide Interoperability for Microwave Access) and so on. EAP is the basis of Internet security authentication, which includes three entities: a client, an auth...

AI Technical Summary

Problems solved by technology

The problem with this method is that it cannot be used as a general solution, because many current scenarios and authentication methods require the AAA server to know the client's authentication ID

However, the problem with this method is that although there is no user identification information in the NAI, attackers can still easily forge the NAI information for ID spoofing, so this method only protects the user ID from being leaked in plaintext transmission, and cannot prevent Forged ID Attacks

Images