Two-way authentication method and system

Abstract

The invention relates to a two-way authentication method and system. The method comprises the following steps: forming, by an authentication device, a first digital signature of the key attribute information of an authenticated device; transmitting the first digital signature and a temporary public key of the authentication device to the authenticated device to be verified by the authenticated device; after the authenticated device verifies the received first digital signature, sending, by authenticated device, a second digital signature of the key attribute information of the authentication device and the temporary public key of the authenticated device to the authentication device to be verified by the authentication device; receiving and verifying, by the authentication device, the second digital signature; and sending, by the authenticated device, authentication success information, and performing encrypted data transmission by using the temporary public keys of the two parties. The authentication device and the authenticated device correctly the key attribute information of the opposite party and perform signature verification so as to achieve two-way authentication. The encrypted transmission of data interaction is realized, and the security of identity verification is further improved.

Description

technical field [0001] The invention relates to the field of communication technology, in particular to a two-way authentication method and system. Background technique [0002] With the advancement of technology, more and more occasions and units such as office environment, personnel scheduling, and information sharing have entered the automation system management mode. Following this, the need for verification of the identity and legitimacy of personnel and equipment entering the system also arises from time to time. [0003] The authentication method adopted by the identity authentication devices existing in the market is one-way authentication, that is, it is only necessary to verify the legitimacy of the authenticated device, without verifying the legitimacy of the authentication device, such as a cryptographic key. When the user needs identity verification to enter the system, he only needs to insert the password key, and the user's identity verification process is co...

AI Technical Summary

Problems solved by technology

This has brought many security risks, such as authentication equipment being maliciously modified to use

[0004] Therefore, the authentication method in the prior art is not perfect, and there are still security problems

Images