Identity-based anonymous authentication method and system

Abstract

The invention relates to an identity-based anonymous authentication method and system. The method comprises the following steps: a server generates two partial private keys and sends the same to double parties P1 and P2 participating in the authentication respectively, wherein P1 and P2 generate a main authentication code (the formula is described in the specification) and R in an authentication process, and the privacy and reliability of the interactive information between P1 and P2 are ensured by using zero knowledge proof; after the P1 obtains the main authentication code, the P1 generatesa pseudo-address AID, generates a third temporary public key R3, calculates a final authentication code alpha, and sends the authentication information (AID, R, R3, alpha, T) the server, and the server verifies the authentication information and feeds back the authentication information to a user, after the successful completion of three times of handshake, the server can establish secure communication with the user. The identity-based anonymous authentication method and system are suitable for jointly completing identity-based distributed anonymous authentication without exposing the respective partial authentication private keys of the both parties together, the both parties holding the partial private keys must participate in the authentication at the same time, and the complete authentication private key does not need to be restored.

Description

technical field [0001] The invention belongs to the field of information security, in particular to an identity-based authentication method and system. Background technique [0002] Anonymous authentication protocols are an important part of network security communication. By implementing an anonymous authentication protocol, two participants can authenticate each other on a public channel and negotiate a session key for secure communication in an open network. In an anonymous protocol based on traditional public-key cryptography authentication, both parties to the communication have a pair of public and private keys: a public key and a private key, where the private key is used to generate authentication information, and the public key is used to verify the legitimacy of the information. In order to solve the difficult problem of certificate management in the anonymous authentication protocol based on traditional public key cryptography, researchers use the idea of ​​publi...

AI Technical Summary

Problems solved by technology

However, when restoring the private key, the user who has obtained the complete private key can perform illegal authentication without the knowledge of other parties, threatening the rights and interests of other users and the security of the system

Images