A two-way authentication method and device between a terminal and a server

Abstract

Embodiments of the present invention provide a two-way authentication method and device between a terminal and a server. Applied to a terminal, the terminal can obtain an encrypted character string according to the terminal private key and the first preset random number, and send it to the server, so that The server authenticates the terminal, decrypts the verification string sent by the server according to the public key corresponding to the server, and obtains the authentication result of the server; when it is applied to the server, when the server receives the encrypted string sent by the terminal, it public key to decrypt the encrypted string, if the decryption fails, it is judged that the terminal authentication has failed; otherwise, it is judged that the terminal authentication is successful, according to the decryption result, the server private key and the second preset random number, a verification string is generated and sent to terminal to enable the terminal to authenticate the server. Based on the above processing, the terminal and the server do not need to download and import certificates, and the number of interactions is small, which is suitable for terminals with low computing power.

Description

technical field [0001] The invention relates to the technical field of communication, in particular to a two-way authentication method and device between a terminal and a server. Background technique [0002] With the advantages of convenient operation, high efficiency, quick response, and intelligence, smart home appliances have become a necessity in people's lives. By integrating microprocessor, sensor technology and communication technology into traditional home appliances, it becomes an intelligent terminal with network communication function, that is, smart home appliances. In addition, a cloud can also be set up for unified management of all smart home appliances, and the cloud can be a server. The terminal can access the server through the network, and after the server is authenticated, it can transmit business data with the server. [0003] In the current technology, in order to ensure the security and reliability of business data transmission, authentication is us...

AI Technical Summary

Problems solved by technology

[0004] However, based on the handshake method of the above-mentioned protocol for authentication, the terminal and server need to download the corresponding certificate and import it into their own devices

During the authentication process, the terminal and the server need to exchange the certificates of both parties, and the two parties need to interact at least four times, which increases the complexity of the authentication. It can be seen that the above method is not suitable for terminals with low computing power.

Images