A network authentication method, device and system

Abstract

The invention discloses a network authentication method, device and system applied to transport layer security (TLS) protocols / data transport layer security (DTLS) protocols. The method comprises the steps that an authentication vector sent by an authentication server is obtained; authentication fields in the authentication vector are utilized for constructing server key exchange information of a DH-PSK type, and the server key exchange information carried in server greeting information is sent to a terminal; client key exchange information, sent by the terminal, of the DH-PSK type is received, and res information carried in the client key exchange information is obtained; whether the res information is matched with XRES information in the authentication vector is determined; when it is determined that the res information is matched with the XRES information in the authentication vector, authentication success of the terminal is determined, a notification message of the authentication success is sent to the user terminal, and therefore users using pre-shared keys are authenticated.

Description

technical field [0001] The present invention relates to the field of communication technology, in particular to a network authentication method, device and system. Background technique [0002] In the prior art, the network authentication technology mainly refers to the process of confirming the terminal identity in the network, while the so-called interactive authentication technology mainly refers to two-way authentication, that is, in addition to the network confirming the terminal identity, the terminal can also confirm the identity of the network server. Through the interactive technology of identity network authentication, the network can know the correct identity of the user, prevent illegal user access, and also enable the terminal to confirm the correct identity of the network, preventing attackers from posing as the network to trick users into accessing. The key generation method is combined with authentication, and the information generated by authentication is us...

AI Technical Summary

Problems solved by technology

[0010] For certificate-based TLS / DTLS handshake protocol authentication, it must be based on the certificate system, which is not applicable to users who use pre-shared keys;

[0011] In summary, although the above three authentication methods can solve the authentication problem and generate keys at the same time, due to the limitations of their respective applications, the scope of application of the keys is limited.

Images