Mobile phone off-line authentication method

Abstract

The invention discloses a mobile phone off-line authentication method. A SD card is inserted in the mobile phone of the user, symmetric cryptographic algorithm is adopted for establishing encryption system and combined symmetric key generation algorithm is adopted for real time generating symmetric key, change is generated at every time for real time updating and effectively managing the key; in each user mobile phone, key seed corresponding to friend circle user is beforehand encrypted into the ciphertext and stored for ensuring storage safety of key seed of the friend circle user, and user identity information center is established on network, the key seeds of all users are encrypted into the ciphertext and stored in the user identity information center for ensuring the storage safety of key seeds of all users, and the safety downloading of the key seeds of friend circle users of mobile phone end is also ensured, thus the off-line authentication between the mobile phone and the user can be realized.

Description

Technical field: [0001] The invention relates to the field of wireless network communication security. Background technique: [0002] At present, the security architecture based on mobile phone identity authentication at home and abroad is based on PKI technology. PKI technology is to establish a CA certification center to complete the online identity authentication of the user’s mobile phone. Offline authentication between the user’s mobile phone cannot be achieved. The CA certification center The construction cost of PKI is relatively high. The PKI technology uses a public key system, and the operation speed is relatively slow. In addition, if the user certificate stored in the CA certification center certificate database is stored in plain text, it is vulnerable to hacker attacks and has low security. The storage of certificates in ciphertext will further reduce the operating efficiency of the CA certification center, resulting in a doubled increase in equipment investment by ...

AI Technical Summary

Problems solved by technology

[0002] At present, at home and abroad, based on identity authentication between mobile phones, the security framework of PKI technology is adopted. PKI technology completes the online identity authentication of user mobile phones by establishing a CA certification center, and cannot realize offline authentication between user mobile phones. CA certification center The construction cost is relatively high, and the PKI technology adopts the public key system, and the operation speed is relatively slow. In addition, if the user certificates stored in the certificate database of the CA certification center are stored in plain text, they are vulnerable to hackers, and the security is low. If the certificate is stored in ciphertext, it will further reduce the operating efficiency of the CA certification center, causing the CA certification center to double the investment in equipment. In short, the existing technology products for mutual identity authentication between mobile phones of users cannot meet the needs of the market

Images