Secret key authentication method based on extensible authentication protocol

Abstract

The invention discloses a key authentication method based on an extensible authentication protocol, and the method comprises the steps: enabling a server to transmit an EAP identity request packet (EAP-Request / Identity) to a client based on the extensible authentication protocol; after receiving the identity request, the client generates a random number Rc, and encrypts an EAP identity response packet by using a shared key k between the client and the server; the server receives the message sent by the client and decrypts the message by using k; the shared key k is used for encryption in the authentication process, so that the problem of complex calculation generated in the public and private key generation process is avoided, and the authentication efficiency is greatly improved; a random number, an encryption algorithm and an exclusive-or operation are adopted between the client and the server, a certificate does not need to be used, the expense of certificate management is avoided, and the authentication cost is saved.

Description

technical field [0001] The invention belongs to the technical field of computer information security, in particular to a key authentication method based on an extensible authentication protocol. Background technique [0002] With the rapid development of global information technology, the application of information technology has penetrated into all aspects of social life. People's work and life are increasingly dependent on computers and wireless networks. The issue of information security has become a major issue faced by individuals, enterprises and countries. . Usually, WLAN is deployed in a network resource environment that allows unauthorized users to access, which means that the transmitted data is easy to be eavesdropped, cyberspace security is extremely vulnerable to threats, and it becomes urgent to verify the legitimacy of access user identities. The Extensible Authentication Protocol (EAP) provides an identity authentication framework for wireless local area net...

AI Technical Summary

Problems solved by technology

[0003] Aiming at the deficiencies of the above-mentioned prior art, the object of the present invention is to propose a key authentication method based on an extensible authentication protocol, which uses a shared key k for encryption during the authentication process, avoiding the complexity generated in the public-private key generation process Calculation issues; random numbers, encryption algorithms, and XOR operations are used between the client and the server, no certificates are required, and the overhead of certificate management is avoided; it has the characteristics of low authentication cost and high efficiency

Images