Method and system for authenticating identity of power grid website based on trusted crypto modules

Abstract

The invention discloses a method and a system for authenticating the identity of a power grid website based on trusted crypto modules. The method comprises the following steps: producing an identity certificate request and sending the identity certificate request to a digital authentication center unit by a website service-side through a PIK function which is provided by a first trusted crypto module; issuing a digital certificate to the website service-side by the digital authentication center unit; sending the self identity certificate to a client-side by the website service-side, and identifying the identity certificate of the website service-side by the client-side; identifying the identity certificate of the website service-side by a second trusted crypto module after the identity certificate which is sent by the website service-side is received by the client-side. The system comprises the digital authentication center unit, the website service-side, the first trusted crypto module, the client-side and the second trusted crypto module. The identity authentication of the website and the protection over user sensitive information are realized through the provision of a reliable user certificate issuing and identity authenticating method under the condition of realizing the bidirectional identity authentication of the power grid website and the client-side user.

Description

Technical field [0001] The invention belongs to the technical field of information security, and in particular relates to a method and system for identity authentication of a power grid website based on a trusted cryptographic module. Background technique [0002] The service users of the 95598 grid interactive website are mainly the public. The public accesses the 95598 grid interactive website through the Internet to learn about the relevant information released by grid companies, conduct online power purchase, smart home control and other interactive operations. The 95598 grid interactive website is mainly operated by customer terminals. , Transmission network and main station system, 95598 grid interactive website client terminals mainly include computer terminals, PDAs, mobile phones, etc.; 95598 grid interactive website master station system is used to provide application services and core business processing; 95598 grid interactive website uses Internet technology to provid...

AI Technical Summary

Problems solved by technology

[0005] The purpose of the embodiments of the present invention is to provide a method and system for power grid website identity authentication based on a trusted cryptographic module, aiming at solving the problem of authenticating user identities on existing websites with user registration and login operations on the power grid website, and preventing attackers from Stealing website identity information and pretending to be a legitimate website and the problem of insecure transmission and storage of user sensitive data

Images