Bidirectional authentication method and system of phone card

Abstract

The invention provides a bidirectional authentication method and system of a phone card. The method comprises the following steps that: a home subscriber server (HSS) and a universal integrated circuit card (UICC) respectively preset an identity identifier and a serial number and an initial random number of a machine-type communications (MTC) unit is generated; the MTC generates a random number 1 and sends the random number 1 to the UICC; the UICC calculates an intermediate value 1 and sends the identity identifier of the UICC, the intermediate value 1, and a random number 2 to the MTC; the MTC calculates an intermediate value 2 and sends the identity identifier of the MTC, the UICC identity identifier, the random number 1, the random number 2, the intermediate value 1, and the intermediate value 2 to the HSS; the HSS determines whether the MTC and the UICC are valid and returns the result to the MTC; and the MTC and the UICC complete serial number updating. Compared with the prior art, the provided method and system has the following beneficial effects: a problem of bidirectional authentication during the terminal and card bonding process can be solved under the circumstances that secrete information sharing by the phone card is not required; and validity of the bonded terminal and card is ensured.

Description

technical field [0001] The invention relates to the technical field of machine-card authentication, in particular to a method and system for two-way machine-card authentication. Background technique [0002] In the machine-card binding process in the prior art, some machine-card binding methods only support one-way authentication of the conditional access card to the terminal. For example, a number is preset for the terminal, and the user is prompted directly through the man-machine interface to send the terminal number and conditional access card number to the conditional access system to perform machine card binding, and then send or use a function to generate a user key to verify the condition Receive the information or number, etc., and meet the conditions to receive the verification of the terminal by the card. [0003] Although some improved machine-card binding methods support two-way authentication between the card and the terminal, they require the card and the ter...

AI Technical Summary

Problems solved by technology

These schemes based on secret information sharing require preset secret information for all cards and terminals to be bound, which is less flexible, and once the secret information is cracked, the entire authentication mechanism will fail.

Images