A white-box password two-way identity authentication method, terminal, server and system

Abstract

The invention provides a white-box cryptography bidirectional identity authentication method, a terminal, a server side and a system. The method comprises the steps of: according to a first white-box key and a first white-box library, encrypting a first identification code by a symmetric white-box cryptography algorithm to obtain a first ciphertext; encrypting the first ciphertext and a random number by a second cryptography algorithm to obtain a second ciphertext; partitioning the second ciphertext into first and second portions, and sending the first identification code, the first ciphertext and the first portion to the server side for carrying out verification; receiving a returned fourth portion and carrying out comparison verification with the second portion, obtaining a third verification result and sending the third verification result to the server end for judging an identity authentication result; receiving a second verification result, and if both the second verification result and the third verification result are successful in verification, judging that identity authentication is passed, wherein the first and second white-box keys and the first and second white-box libraries are generated according to the symmetric white-box cryptography algorithm. The white-box cryptography bidirectional identity authentication method, the terminal, the server side and the system which are provided by the invention ensures safety of the identity authentication process in a white-box attack environment.

Description

technical field [0001] The application relates to the technical field of security encryption, in particular to a white-box cipher two-way identity authentication method, a terminal, a server and a system. Background technique [0002] The traditional network identity authentication method based on the symmetric cryptography system is to use computer, password and network technology to set up a pair of identical symmetric cipher algorithms at both ends of the client and the network server, and use the encryption algorithm of the client to authenticate a group of The finite-length plaintext is encrypted to generate a ciphertext, and the ciphertext is used as an authentication code, which is sent to the server via the network together with the user number, time stamp and random code for authentication. [0003] In the white-box attack environment, in the current attack methods, it is easy to obtain passwords through disassembly of binary files, static analysis, and control of t...

AI Technical Summary

Problems solved by technology

Identity authentication based on symmetric cryptographic system cannot be used safely, and it is even extremely fragile. The key becomes a single point of failure for any protection system that uses cryptographic technology.

Images