A network security certification method and device

Abstract

The invention discloses a network security authentication method, which is applied to a system including a client identifier, a two-way encryptor and a server parser. The method includes: using a client identifier to judge whether the random code decrypted by the client that initiates the identification request is the same as the random code before the client's long-term invariant password encryption; The client attribute information encrypted by the long-term invariant password of the client is sent to the client; the server-side parser uses the long-term invariable password of the server and the long-term invariant password of the client to parse the encrypted client-side information sent by the client Client attribute information to determine the identity of the client. Since the long-term invariable passwords of the client and the server are preset, the distribution of the long-term invariant passwords of the client and the server is unidirectional, which enhances the security of authentication. The corresponding network security authentication device is also disclosed.

Description

technical field [0001] The invention relates to security authentication technology, in particular to a network security authentication method and device. Background technique [0002] With the rapid development of today's computer information network, network security is facing severe challenges, the network security situation has become more and more complex, data leakage, DDOS attacks and other incidents have intensified, and network security certification has become a top priority. Traditional identity authentication The traditional authentication method is through the private key and the public key. The public key and the private key are easy to forge and steal because this encryption method is a symmetric encryption, and the key will be issued at the same time when it is distributed. Public key and private key. At this time, it is easy to intercept the two keys. Once you have both the public key and the private key, you can forge information, which has the disadvantages...

AI Technical Summary

Problems solved by technology

Traditional identity authentication The traditional authentication method is through the private key and the public key. The public key and the private key are easy to forge and steal because this encryption method is a symmetric encryption, and the key will be issued at the same time when it is distributed. Public key and private key. At this time, it is easy to intercept the two keys. Once you have both the public key and the private key, you can forge information, which has the disadvantage of being easy to forge and steal.

Images