Identity authentication method, system thereof, authentication subject and authenticated subject

Abstract

The present invention provides an identity authentication method, a system thereof, an authentication subject and an authenticated subject. A symmetric key SK, a public key PubK and information df (PI) based on a user characteristic are appointed between the authentication subject and the authenticated subject in advance, and a private key PrivK corresponding to the PubK is generated on the authenticated subject. The method comprises the following steps: S1, the certification subject generates transaction control data T, and sends the T to be certified subject; S2, the authenticated subject adopts a preset authentication function to carry out calculation on the SK, T and df (PI) to obtain W, uses the PrivK to encrypt the W to obtain V, and sends the V to the authentication subject; S3, the authentication subject uses the PubK to decrypt the V to obtain W', and uses the preset authentication function to carry out calculation on the SK, T and df (PI) to obtain the W; S4, the authentication subject authenticates whether the W obtained in the step S3 is consistent with the W' or not, if so, identity authentication is passed, otherwise the identity authentication is failed. According to the method, the system, the authentication subject and the authenticated subject, while raising the security, a trusty degree of transaction is ensured.

Description

【Technical field】 [0001] The invention relates to the technical field of computer security, in particular to an identity authentication method, system, authentication subject and authenticated subject. 【Background technique】 [0002] The identity authentication process is that the authenticating subject authenticates the authenticated subject to confirm the identity, ownership and ownership rights, etc., where the authenticating subject is usually a service provider, and the authenticated subject is usually a user. At the most basic level, it is the process in which the authentication subject confirms the information submitted by the authenticated subject. In principle, the authentication subject and the authenticated subject need to establish shared information, and through the identification of the shared information to achieve authentication, this shared information is the basis for establishing trust and authentication. [0003] There are mainly two existing identity au...

AI Technical Summary

Problems solved by technology

However, this authentication method also has disadvantages, that is, the addition of a third party in the authentication process makes the trust and authentication between the authentication subject and the authenticated subject change into trust for the third party, and the addition of the third party not only brings great benefits to the system Complexity, but also security risks

For example, it was recently disclosed that the third-party Verisign server in the public key infrastructure (PKI) has been hacked, so the security of the global Internet has hidden dangers, because the roots of all digital certificates that asymmetric authentication relies on are in Verisign's server

Images