An entity authentication method, device and system

Abstract

The present invention discloses an entity authentication method, device and system. The method includes: entity A sends an authentication request message to entity B, and the authentication request message includes data N1 locally generated by entity A and result SN1 of PSK XOR operation, PSK is the key shared by A and B; Entity B receives the authentication request message sent by entity A, XORs SN1 in the authentication request message with PSK, processes the result of the XOR operation according to the agreed rules, and performs XOR operation with PSK again Get SON1, send SON1 to entity A through the authentication response message; entity A receives the authentication response message sent by entity B, performs XOR operation between SON1 and PSK in the authentication response message, and compares the result of XOR operation with N1 according to the agreed rules Compare the processed results, and identify whether the entity B is legal according to the comparison results. The invention effectively saves the calculation overhead in the identification process and improves the operation efficiency of the identification process.

Description

technical field [0001] The invention relates to the application field of network security in information security technology, in particular to an entity authentication method, device and system. Background technique [0002] Resource-constrained wireless networks, including SN (Sensor Network, sensor network), MFAN (Magnetic Field Area Network, magnetic domain network), RFID (Radio Frequency Identification, radio frequency identification) network, etc., are used in military, environmental monitoring, forest fire prevention, health Medical, logistics and other fields have broad application prospects, and are playing an increasingly important role in these fields. Due to the wireless and broadcast characteristics of this type of network during communication, it is vulnerable to attacks such as eavesdropping, tampering, forgery, and entity capture and duplication. It is necessary to introduce low-overhead authentication and message confidentiality mechanisms to ensure Entity l...

AI Technical Summary

Problems solved by technology

[0003] However, the current authentication methods are generally based on cryptographic operations, requiring entities in the network to preset corresponding cryptographic algorithms, otherwise the authentication protocol cannot be executed; moreover, even if the entity presets cryptographic algorithms, this type of authentication protocol will also fail when executed. Causes computational overhead to entities in the network, such as authentication methods based on symmetric and asymmetric cryptographic algorithms, all require entities to perform encryption and decryption operations, thus increasing the resource burden on network entities

Images