Authentication method and device, electronic equipment and storage medium

Abstract

The invention provides an authentication method and device, electronic equipment and a storage medium, and relates to the technical field of communication, a client sends a first random number to a server, so that the server determines first authentication comparison information according to the first random number, a second random number generated by the server and a user password; receiving a second random number sent by the server, determining first authentication information according to the first random number, the second random number and the user password, and determining a second session key according to the first authentication information and the user password; sending the first authentication information to the server, so that the server generates authentication passing information when determining that the first authentication comparison information is the same as the first authentication information; and if authentication passing information sent by the server is received, performing encrypted communication with the server through the second session key. According to the application, the security of the user password can be fully protected, the negotiation of the session key can be realized, and the calculation load and the network overhead can be reduced, so that the burden of an application system is reduced.

Description

technical field [0001] The present application relates to the field of communication technologies, and more particularly, to an authentication method, apparatus, electronic device and storage medium. Background technique [0002] In an Internet application system, a server and a client usually require one-way or two-way authentication before communication. One-way authentication means that the server needs to authenticate the client to prevent illegal users from accessing the system; while two-way authentication means that in addition to the server that needs to authenticate the client, the client also needs to authenticate the server to prevent users from accessing the system. Access illegal phishing websites. [0003] At present, in the early application systems, user passwords are often used for authentication. Although this authentication method is simple and easy to use, it will not increase network overhead and computing load, but there are the following problems in t...

AI Technical Summary

Problems solved by technology

[0003] At present, user passwords are often used for authentication in early application systems. Although this authentication method is simple and easy to use, and will not increase network overhead and computing load, there are the following problems in the authentication communication process: user passwords are easily intercepted, And the negotiation of the session key cannot be realized

However, the SSL protocol requires a third-party certificate authority (Certificate Authority, CA) to participate in issuing digital certificates representing their respective identities for the server and client. At the same time, the SSL protocol uses asymmetric encryption algorithms in the process of authentication and session key negotiation. Perform operations such as signing, verifying signatures, encryption and decryption, etc., the calculation load is heavy, the network overhead is large, and the burden on the application system is increased

Images