Bidirectional authentication method and system based on shared key, and terminal

Abstract

The invention provides a bidirectional authentication method and system based on a shared key, and a terminal. The first terminal sends an authentication request to a second terminal, the second terminal sends an authentication request response to the first terminal, and the first terminal generates a second random number and sends a verification request comprising a first encryption result obtained by encrypting the first random number and the second random number according to the selected algorithm kit and a first shared key index to the second terminal; the second terminal sends a verification request response comprising a second encryption result and a second shared key index to the first terminal, decrypts the first encryption result, and authenticates the first terminal as a valid user if the decryption result is consistent with the first random number; and the first terminal decrypts the second encryption result, and if the decryption result is consistent with the second randomnumber, the second terminal is authenticated to be a valid user. According to the bidirectional authentication method and system based on the shared key, and the terminal, bidirectional authenticationbetween users is realized, and the security is high.

Description

technical field [0001] The invention relates to the technical field of network authentication, in particular to a shared key-based bidirectional authentication method, system, and terminal. Background technique [0002] In the prior art, the most widely used authentication method when accessing network services is identity authentication based on public key encryption algorithms. Both parties in the communication hold a pair of public key and private key respectively, one of them uses the private key to encrypt specific data, and the other party uses the public key to decrypt the data; if the decryption is successful, the user is considered to be a legitimate user, such as SSL, digital signature etc. [0003] In practice, the user usually has an electronic certificate file, which contains the public key information, the user subject, and the digital signature of the digital certificate certification authority on the file. Other users judge whether the certificate is credib...

AI Technical Summary

Problems solved by technology

[0005] (1) Public key-based authentication methods rely on public key infrastructure, such as digital certificate certification bodies, resulting in complex configuration and high requirements;

[0006] (2) Compared with the symmetric key algorithm, the operation speed of the existing public key algorithm is slower

Images