An identity-based end-to-end key authentication negotiation method and system

Abstract

The invention discloses an identity-based end-to-end key authentication negotiation method and system. The sending end generates the first key exchange information T_A, and according to T_A, the sending end private key, the sending end identity ID_A, and the receiving end identity ID_B, the first key exchange related information generate the first message authentication code mac1, and send mac1 and T_A to the receiving end; the receiving end generates the second key exchange information T_B, according to the second key exchange information T_B, the receiving end private key , ID_A, T_A, the second key exchange related information to generate the second message authentication code mac2, and send mac2 and T_B to the sending end; the sending end generates the third message authentication code mac3 according to T_A, T_B, ID_A, ID_B; the receiving end After verifying mac1, sending end verifying mac2, and receiving end verifying mac3, the key authentication negotiation between the two ends is successful. The invention is especially suitable for the network where the identity mark and the location are separated, and can improve the security of the key agreement at the same time.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to an identity-based end-to-end key authentication negotiation method and system. Background technique [0002] The end-to-end authentication and key agreement method is an information security technology widely used in communication networks, and is generally implemented through public key cryptography and symmetric cryptography. Among them, the use of symmetric cryptography requires complex and secure key distribution and management systems. [0003] Public key cryptography needs to generate a pair of mathematically related public key and private key for each user. The public key is publicly released in a certain way, so that any sender can obtain the public key of the receiver, and the private key is provided by the receiver. kept secret. One of the biggest security problems in traditional public key cryptography systems is how to ensure that the public key used re...

AI Technical Summary

Problems solved by technology

The implicit authentication method adopted by the second technology is usually carried out after the message exchange is completed, which is easy to cause denial of service attack (DOS)

[0013] The above method adopts the implicit authentication method, and the other party can only be authenticated after the message exchange is completed, which is easy to cause a denial of service attack

Images