Bidirectional authentication method and device

Abstract

The invention provides a bidirectional authentication method and device. The method comprises the steps: receiving a server certificate, a second random number, a target password suite and a server public key which are sent by a server in response to an authentication request, obtaining data in the server certificate if the server certificate is checked to be signed and issued by a preset signing and issuing mechanism; and if the data are consistent with the data provided by the server, generating a third random number, and generating a first main communication password through a preset key exchange algorithm; encrypting the third random number by using the server public key to obtain an encrypted third random number, and generating a client communication ciphertext by using the first main communication password and the target password suite; sending the encrypted third random number, the client certificate and the client communication ciphertext to the server; and after a server-side communication ciphertext returned by the server side is received, the server-side communication ciphertext is decrypted according to the first main communication password and the target password suite, and if data carried in the server-side communication ciphertext is not tampered, the bidirectional authentication is confirmed to pass.

Description

technical field [0001] This application relates to the field of network security, in particular, to a two-way authentication method and device. Background technique [0002] Nginx (enginex) is a high-performance, lightweight HTTP and reverse proxy web server. It also provides IMAP / POP3 / SMTP services and is issued under the BSD-like protocol. It is characterized by less memory and strong concurrency, and uses OpenSSL to generate server-side certificates. [0003] When the client accesses Nginx, it sends an authentication request to Nginx, and Nginx transmits the server certificate to the client. After verifying the server certificate, the client connects to Nginx and communicates with Nginx. However, in this authentication method, the client uses the Https protocol to perform one-way authentication for secure access to the server. Since the server does not authenticate the client, some malicious clients will frequently access the server and launch malicious web attacks on th...

AI Technical Summary

Problems solved by technology

However, in this authentication method, the client uses the Https protocol to perform one-way authentication for secure access to the server. Since the server does not authenticate the client, some malicious clients will frequently access the server and launch malicious web attacks on the server, reducing The security of the server is compromised, and the performance of the server is also degraded.

Images