Identity authentication method and device

Abstract

The invention discloses an identity authentication method and device. The method is applied to a server of an identity authentication system, and comprises the following steps: performing identity registration according to user identity information and equipment identity information in an identity registration request, equipment integrity information reflecting an equipment operation state and thelike, and binding equipment and a user through identity registration to generate an authentication certificate; when a system access request exists, authenticating identities of a user and equipmentand equipment operation state information and realizing multi-level identity authentication; further, formulating multi-level and multi-combination access control strategy through comprehensively authenticating the identity and the equipment state, thus the network system safety is effectively increased. In the identity authentication method, the user identity is authenticated based on the multi-factor technology, the equipment identity is authenticated based on trusted computing, and the equipment integrity is authenticated, so that a zero-trust identity authentication system is realized, andthe security of the network system is effectively improved.

Description

Technical field [0001] The present invention relates to the field of computer technology, in particular to an identity authentication method and device. Background technique [0002] With the development of information technology, emerging applications such as cloud computing, mobile Internet, BYOD (Bring Your Own Device, office with your own device) and the popularization of mobile office methods, the boundaries between the internal and external networks have become blurred, and the existing In a border-centric network security architecture, assuming that the internal network can be trusted, identity authentication is based only on user identity information. This method only confirms the user identity without authenticating the security of the device. Once the identity of the trusted user is Misappropriation or fraudulent use by malicious users, or hidden security risks of the equipment used by users, will directly affect the security of internal network resources, causing losse...

AI Technical Summary

Problems solved by technology

[0003] In order to solve the above technical problems, the present invention provides an identity authentication method and device, which solves the problem of relatively large security risks caused by identity authentication only for user identities in existing identity authentication methods

Images