Lightweight certificateless authentication method, client and system

Abstract

The invention discloses a lightweight certificateless authentication method, client and system, and relates to the technical field of information security. The method comprises the following steps: the client generates a temporary public key and a temporary private key, and sends an identity label and the temporary public key to a key generation center; the key generation center calculates according to the identity identifier and the temporary public key to obtain a part of public key and a part of private key, and sends the part of public key and the part of private key to the client; the client calculates according to the temporary private key and the part of private key to obtain a complete private key; and when the client performs public key verification with a third party, verification is performed with the third party according to the complete private key, the identity identifier and the part of the public key. The method is suitable for the environment of the Internet of Things,is low in operation complexity, can be compatible with an existing public key infrastructure, and does not need complex certificate management, the client has complete autonomy for the private key, does not have a secret key escrow problem, and needs less data to be transmitted during public key authentication.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a lightweight certificateless authentication method, client and system. Background technique [0002] At present, public key authentication technology is an effective technology to enhance the security of IoT terminal devices. There are two main public key authentication technologies commonly used in China, SM2 public key authentication and SM9 public key authentication. Among them, SM2 authentication is currently the most widely used public key authentication method. The disadvantage is that identity authentication requires the participation of digital certificates, which is a relatively heavy burden for the storage space and transmission bandwidth of lightweight IoT terminal devices; SM9 Authentication is a public key authentication method based on identity identification. The disadvantage is that the algorithm is complex and difficult to implement on lightweight I...

AI Technical Summary

Problems solved by technology

Among them, SM2 authentication is currently the most widely used public key authentication method. The disadvantage is that identity authentication requires the participation of digital certificates, which is a relatively heavy burden for the storage space and transmission bandwidth of lightweight IoT terminal devices; SM9 Authentication is a public key authentication method based on identity identification. The disadvantage is that the algorithm is complex and difficult to implement on lightweight IoT terminal devices.

Images