Safety communication secret key negotiation interaction scheme

Abstract

The invention provides a method for safety communication between an application on a mobile terminal and a network server. Shared secrets of a user and a server are overlapped and bound with an identification code of mobile intelligent terminal equipment and a mobile phone number of the user by utilizing a cryptology; then the obtained product is applied to an identity authentication system to implement authentication on a client side; a digital certificate and a digital signature mechanism are utilized to implement authentication on the server; a session key is established with a network server by utilizing a Differ-Hellman secret key negotiation protocol so as to carry out safety data communication. The method is characterized in that the shared secrets are overlapped and bound with identification code of the machine and the mobile phone number of the user and the shared secrets are updated regularly; even though information is stolen by an attacker, a system still cannot be influenced. The user not only needs to provide a login password, but also needs to use the system on designated equipment. The method can ensure that the user carries out safety communication with the server on internet by the mobile equipment.

Description

technical field [0001] The invention relates to the technical field of information-based mobile office, in particular to the technology of secure communication of mobile terminals. A method for secure communication between an application on a mobile terminal and a network server is provided. Background technique [0002] A smart mobile terminal is a multifunctional device that not only has a communication function, but also can conduct e-commerce, mobile office and other services after installing an application program. After the terminal is connected to a computer to form a network, it can complete information processing and interaction according to the received instructions. , to provide users with a convenient and efficient information interaction medium. As a kind of mobile device, intelligent mobile terminal equipment has the characteristics of "small and light" and "convenient communication". The interface is simple, and it interacts with other devices wirelessly. W...

AI Technical Summary

Problems solved by technology

However, because SSL is based on Web browsers, it can support B / S applications very well, but the application support for C / S is not perfect. Because many enterprises have many C / S applications, the use of SSL has been greatly restricted. limit

In addition, the mobile terminal does not have the conditions to safely store the private key. If the digital certificate and key are leaked, there is a possibility of being attacked, tampered with and forged

Images