Equipment authentication method, card equipment and equipment authentication system

Abstract

The invention discloses an equipment authentication method, card equipment and an equipment authentication system. The equipment authentication method comprises the following steps: the card equipment is triggered to generate first random data when a communication connection is built between the card equipment and main equipment; the card equipment transmits the first random data and a card equipment identification code to the main equipment, to trigger the main equipment to generate second random data and transmit the second random data to the card equipment, and the main equipment generates first identity authentication data and first session key data by computing; the card equipment generates second identity authentication data and second session key data by computing according to the key data, the first random data and the second random data; the card equipment acquires the first identity authentication data and compares the first identity authentication data with the second identity authentication data to judge whether identity authentication is successful; and when the identity authentication is successful, the card equipment performs data interaction with the main equipment via the second session key data. The method provided by the invention aims at providing security of interaction data between the card equipment and the main equipment.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a device authentication method, a card device and a device authentication system. Background technique [0002] Before exchanging data with the security device, in order to ensure the security of the interactive data, the host and the card device need to recognize each other's identity. After confirming the identity, a session key is further negotiated, and the subsequent interactive data is encrypted and transmitted with the session key. . When exchanging data between the existing card device and the master device, the session key is fixed data, which makes the data interaction between the card device and the master device less secure. Contents of the invention [0003] The main purpose of the present invention is to provide a device authentication method, a card device and a device authentication system, aiming at improving the security of data interaction betwe...

AI Technical Summary

Problems solved by technology

When the existing card device and the main device perform data interaction, the session key is fixed data, which makes the data interaction between the card device and the main device less secure

Images