A two-way communication authentication method and system

Abstract

The present disclosure discloses a two-way communication authentication method and system, including receiving a first authentication request, generating and encrypting a first random number, and sending the first encrypted random number to a first server so that the first server can decrypt it; receiving The second authentication request generates a second random number, encrypts the second random number and the third random number decrypted by the first server, and sends the second encrypted random number to the second server, so that the second server can Decrypt the encrypted random number and verify the third random number; receive the second server to decrypt the fourth random number, encrypt the fourth random number, and send the obtained third encrypted random number to the first server, so that the first The server decrypts the third encrypted random number and verifies the fourth random number. Use random numbers and encryption technology to verify the correctness of the identities of both parties, solve the problem of identity impersonation, and realize the two-way authentication of communication between the integrated monitoring system and its subsystems.

Description

technical field [0001] The present disclosure relates to the technical field of rail transit, in particular to a two-way communication authentication method and system. Background technique [0002] The statements in this section merely provide background information related to the present disclosure and do not necessarily constitute prior art. [0003] The urban rail transit comprehensive monitoring system is a large-scale layered distributed monitoring system, which is composed of professional automation subsystems integrated in it, and at the same time interconnected with independent professional systems for information interaction. The main functions of the comprehensive subway monitoring system include the real-time centralized monitoring of equipment and the coordination and linkage function between various systems. Through the comprehensive monitoring system, real-time centralized monitoring and control of power system, environment and equipment monitoring system, FA...

AI Technical Summary

Problems solved by technology

At present, the inventors have found that the focus of the system is on normal communication between devices rather than network security, so the security of communication between network devices and the security of network devices themselves are relatively weak

The lack of access control between the system and each subsystem, security monitoring and intrusion prevention measures are still blank. During the operation of the system, the security configuration is insufficient, the information security monitoring mechanism is not perfect, and information security problems such as intrusion are prone to occur.

Images