Subscriber and subscriber terminal equipment correlation authentication method and system

Abstract

The invention discloses a subscriber and subscriber terminal equipment correlation authentication method and system. The method comprises that subscriber identities are verified according to subscriber digital certificates obtained from CA; terminal equipment dynamic authorization codes are generated for subscribers after the subscriber identity verification is passed; authorization code verification is performed on subscriber terminal equipment requiring to be correlated and authenticated to be credible through the terminal equipment dynamic authorization codes; terminal equipment sends digital certificate application information to the terminal equipment for applying for terminal equipment digital certificates after the terminal equipment dynamic authorization code verification is passed and terminal equipment digital certificates are signed for the terminal equipment according to the application information. According to the method and the system subscriber main identities and a plurality of pieces of terminal equipment are correlated and authenticated for the subscriber credible terminal equipment, so that the reliability and the safety of subscriber identity and terminal equipment identity authentication are improved, and correlation authentication can be performed on the subscriber identities and the terminal equipment simultaneously.

Description

technical field [0001] The present invention relates to the technical field of digital authentication, in particular to an associated authentication method and system for a user and a user terminal device. Background technique [0002] With the rapid development of the mobile Internet, more and more users need to access network applications through a variety of terminal devices, such as traditional PC terminal devices, or emerging mobile smart terminal devices. In recent years, In recent years, smartphones and tablets designed for individual consumers have been continuously used by enterprises to carry key business and core applications. The resulting security risks have also led users to put forward higher security requirements for the mobile application environment: how to effectively identify and authenticate users and terminal devices, ensure the application security of mobile data, and improve the user's terminal security experience. It has become an urgent problem for...

AI Technical Summary

Problems solved by technology

The resulting security risks have also led users to put forward higher security requirements for the mobile application environment: how to effectively identify and authenticate users and terminal devices, ensure the application security of mobile data, and improve the user's terminal security experience. It has become an urgent problem to be solved for the healthy development of the Internet

[0003] The existing means of improving network security have the following problems: traditional device digital authentication can only authenticate the device alone, and the legal identity of the device is identified by issuing the device digital certificate

However, when a user owns multiple terminal devices such as PCs, laptops, smartphones, and tablets, separate authentication devices cannot be associated with user identities, and authentication needs to be performed one by one, which is very inconvenient

In addition, in the existing equipment authorization management, the authorization information is stored in the authorization management system database. In this way, the tamper-proof and safe and reliable associated authentication cannot be guaranteed.

That is: in the existing method, it is impossible to authenticate the user identity and the terminal device at the same time; a user has multiple terminal devices, the complexity of repeated authentication is high, and the user experience is poor; independent authentication of multiple devices cannot establish an authentication association with the subject identity. The authentication results are separated; using the common authorization method, only the authorization attribute value is saved in the database, and the authorization relationship cannot be tamper-proof

Images