Identity authentication method and device

Abstract

The embodiment of the invention discloses an identity authentication method, which comprises the following steps that: an authentication access controller (AAC) acquires an identity ciphertext message sent by a request device REQ, the identity ciphertext message comprises an identity information ciphertext of the REQ, the AAC decrypts the identity information ciphertext of the REQ to obtain a digital certificate CertREQ of the REQ, a first authentication request message comprising the CertREQ is sent to a first authentication server, and the first authentication request message comprises the CertREQ; the AAC receives a first authentication response message sent by the first authentication server, the first authentication response message comprises authentication result information and a digital signature of the first authentication server, the AAC verifies the digital signature of the first authentication server by using a public key of the first authentication server, and if the verification is passed, the AAC sends the authentication result information to the first authentication server; and if yes, the AAC determines an identity authentication result of the REQ according to a verification result of the CertREQ in the authentication result information.

Description

technical field [0001] The present application relates to the technical field of network communication security, and in particular, to an identity authentication method and device. Background technique [0002] In a communication network, a requesting device can access the network through an authenticated access controller. In some situations with high security requirements, the authentication access controller needs to authenticate the identity of the requesting device to ensure that the requesting device accessing the network belongs to a legitimate user. In addition, the point-to-point transmission in the blockchain technology also needs to establish a trust relationship between different nodes, so it is also very important for the identification of nodes. [0003] In the process of performing identity authentication on the requesting device, the requesting device needs to provide its own identity information for identity authentication. However, this type of identity i...

AI Technical Summary

Problems solved by technology

[0004] If during the identity authentication process of the requesting device, the identity information of the requesting device is intercepted by an attacker and used for illegal purposes, it will cause great security risks to the authentication access controller, requesting device and the network

Images