Identity authentication method, user equipment and server

Abstract

The invention discloses an identity authentication method, which is applied to a user equipment side, and comprises the steps of: sending an equipment authentication public key and an equipment unique identifier to an equipment authentication server for storage by the equipment authentication server; using an equipment authentication private key to sign a server authentication public key, and sending signature data and the equipment unique identifier to the equipment authentication server, so that the equipment authentication server retrieves the equipment authentication public key by means of the equipment unique identifier, performs signature authentication on the signature data, and returns a result to an identity authentication server for storage when the signature authentication passes; and using a service authentication private key for signing a user authentication public key, sending signature data to the identity authentication server so that the identity authentication server performs signature authentication by using the service authentication public key, and saving the user authentication public key when the signature authentication passes. The identity authentication method solves the security risk problem existing in registration of a user in the existing FIDO authentication standard. The invention further provides corresponding user equipment and servers.

Description

technical field [0001] The invention relates to authentication technology, in particular to an identity authentication method, user equipment and server. Background technique [0002] The FIDO online rapid identity authentication standard (hereinafter referred to as the FIDO standard) is an open standard protocol proposed by the FIDO Alliance, which aims to provide an online identity authentication with high security, cross-platform compatibility, excellent user experience and user privacy protection Technology Architecture. The FIDO standard completes user authentication by integrating biometrics and asymmetric encryption, trying to end the trouble that users have to memorize and use a large number of complex passwords for many years. [0003] However, FIDO's system architecture still has some security risks. In the FIDO UAF architecture, the user authentication key is generated by the authenticator embedded in the client device, the user private key is stored in the auth...

AI Technical Summary

Problems solved by technology

[0004] An object of the present invention is to provide a kind of identity authentication method, and user equipment and server based on this method in order to solve the existing FIDO authentication standard, the security risk problem that the user exists when registering

Images