End-to-end authentication and key negotiation method, device and system

Abstract

The invention relates to an end-to-end authentication and key negotiation method, device and system, the system comprises a first communication device and a second communication device, the first communication device is used for sending a first message to the second communication device, and the first message comprises a first key generation parameter; the second communication equipment is used for performing identity authentication on the first communication equipment; the second communication device receives thefirst message sent by the first communication device and generates a security parameter according to the second key generation parameter and a first key generation parameter included in the first message, the second communication device sends a second message to the first communication device, and the second message includes the second key generation parameter; and the first communication device is used for carrying out identity authentication on the second communication device, receiving the second message, and generating a security parameter according to the first key generation parameter and a second key generation parameter included in the second message so as to realize end-to-end identity authentication and key negotiation.

Description

technical field [0001] The present application relates to the technical field of communications, and in particular to an end-to-end authentication and key agreement method, device and system. Background technique [0002] Identity network (id-oriented networking, ION) is a new type of network architecture for future networks. [0003] In ION's network architecture, the identity (identity, ID) and location (locator or IPaddress) of the host are separated, and through the decoupling of identity and location, the session connection based on identity can cross multiple address boundaries, regardless of the communication address. limits. In the network architecture of ION, a unified control management layer is also established to manage related services. The control management layer is deployed in a distributed manner in the network for unified management of the host's identity, location and other information. [0004] In the ION network architecture, when performing end-to-end...

AI Technical Summary

Problems solved by technology

[0004] In the ION network architecture, when performing end-to-end communication between hosts based on identity and location separation, in order to ensure communication security, it is necessary to perform security authentication and key negotiation on the hosts of end-to-end communication. However, there is currently no applicable ION End-to-end authentication and key agreement method of network architecture

Images