Bidirectional self-authentication method based on identification password

Abstract

The invention provides a bidirectional self-authentication method based on an identification password. In combination with the identification password, forced authentication and control are carried out on access user and equipment, so that a connection between communication entities can be trustable and controllable; for IBC elliptic curve-based bidirectional identity self-authentication established on the basis of a two-layer transmission protocol, under the condition that a certificate and a third-party trust mechanism are not required to be online, the negotiation of a shared key is realized, the real-name identity authentication of the access user is rapidly completed, and meanwhile, the user can authenticate an accessed network; and a port of an access switch runs a bidirectional self-authentication protocol of a self-authentication network to authenticate a user terminal / device connected to the port.

Description

technical field [0001] The invention belongs to the technical field of computer network security, in particular to a two-way self-authentication method based on an identification password. Background technique [0002] Access identity authentication of network entities is a fundamental aspect of system security. It is used to confirm the identity of any user attempting to log in or access network resources. This kind of authentication is very important in interactive networks. It is the most basic and important line of defense in most computer security environments, and it is the basis for access control and user responsibility. RFC 2828 defines user authentication as follows. [0003] Methods for verifying identity are proposed by or for a system entity. The authentication method consists of the following two steps: [0004] In the authentication phase, identity marks are provided to the security system (the identity marks must be assigned carefully, because the authent...

AI Technical Summary

Problems solved by technology

However, each method has drawbacks: attackers may forge or steal tokens; users may forget passwords or lose tokens; biometric authentication systems have various problems, such as dealing with false positives and false negatives, Cost, convenience, privacy protection, etc.

[0011] 1) Inefficient, authentication can only be performed after the authentication information is forwarded by the NAS to the third-party authentication server;

[0012] 2) The third-party server needs to store and manage all user passwords or certificates, which has management pressure and has become a security weakness;

[0013] 3) Double authentication cannot be performed, because all authentication information is forwarded by the NAS, so the RADIUS server must trust the NAS to complete the authentication; therefore, the user may be attacked by a phishing network if he confirms the legitimacy of the NAS identity

Images