Terminal identity authentication method, apparatus and system

Abstract

The application provides a terminal identity authentication method, apparatus and system. The method comprises: a service provider root certificate for root-certificate-based signing is configured to a service provider; a server side signs a message issued to a client by using the service provider root certificate; the server side of the service provider sends a request message including the service provider root certificate and the message signature to the client; the client verifies the service provider root certificate and the message signature in the request message by using the service provider root certificate in the request message and a root certificate preset at the client; and according to the verification results of the message signature and the service provider root certificate, whether the received request message is from a legal terminal in an open standard is determined. On the basis of the implementation plan of multi-level-certificate-based terminal identity authentication, safe, effective, and reliable identity authentication of a terminal accessed to an industrial open standard is realized; identity counterfeiting of an illegal identity is prevented; and high safety and stability of the industrial open standard are guaranteed.

Description

technical field [0001] The present application belongs to the technical field of information communication data processing, and in particular relates to a terminal identity authentication method, device and system. Background technique [0002] With the rapid development of information technology and Internet technology, major service providers usually need to perform a large amount of information interaction with the user's terminal equipment when providing services to users. In order to ensure the secure communication between the user's client and the service provider's server and standardize the interaction methods and processes of different clients and service providers, certain industry standards are usually formulated in different business fields to regulate and restrict different The behavior of clients and service providers promotes the development of the industry. [0003] However, in the implementation process of the industry standards that already exist in many b...

AI Technical Summary

Problems solved by technology

However, in the actual implementation process, this method is easy to be circumvented and circumvented, and it is difficult to truly achieve the purpose of ensuring the effective identity authentication of the member family and eliminating the forgery of illegal member identities, so that the security and stability of open standards cannot be obtained. Guarantee, which greatly reduces member users' perception of service use of industry open standards

Images