Identity authentication method, terminal and server

Abstract

One or more embodiments of the present specification provide an identity authentication method, a terminal and a server. The terminal obtains a public key and a private key pair according to a deviceidentification number, generates a random number, and performs digital signature processing on the device identification number and the random number by using a private key to obtain signature data, and sends the device identification number, the random number and the signature data to a server, so that the server searches a public key corresponding to the terminal from a preset public key matrixaccording to the device identification number, verifies the signature data by using the searched public key, generates a communication key if the verification is passed, encrypts the communication keyby using the searched public key, obtains a ciphertext communication key, sends the ciphertext communication key to the terminal, receives a ciphertext communication key sent by the server, decryptsthe ciphertext communication key by using the private key to obtain a communication key, and performs secret communication with the server by using the communication key. According to the embodiment of the invention, identity authentication between the terminal and the server can be realized, and the authentication process is relatively simple.

Description

technical field [0001] One or more embodiments of this specification relate to the technical field of information security, and in particular, to an identity authentication method, a terminal, and a server. Background technique [0002] In some distributed systems, several terminals in distributed configuration need to be connected to the server uniformly to realize specific functions such as data transmission, control, and management. In various business scenarios such as multi-site integration, terminals are widely distributed, and the network environment is complex and diverse. There are security issues such as data theft and network attacks. In order to improve the data security of the distributed system, the terminal needs to authenticate with the server. The existing identity authentication method is based on the public key infrastructure technology (PKI system). Since the authentication process involves a complete authentication chain such as a CA institution, the aut...

AI Technical Summary

Problems solved by technology

The existing identity authentication method is based on the public key infrastructure technology (PKI system). Since the authentication process involves a complete authentication chain such as a CA institution, the authentication process is complicated, the performance requirements are high, and the authentication process needs to be networked to complete the authentication process, which is not applicable. For lightweight authentication of multiple terminals

Images