Identity authentication method and device

Abstract

The invention discloses an identity authentication method, which aims at an authentication scene that request equipment adopts a pre-shared key and an authentication access controller adopts a digital certificate, and comprises the following steps of: verifying the legality of the digital certificate of the authentication access controller by a first authentication server trusted by the authentication access controller to obtain a first verification result; a second authentication server trusted by the request device verifies the identity authentication code of the request device by using a pre-shared key of the request device to obtain a second verification result, and the request device and the authentication access controller determine whether the opposite entity is legal according to the verification results corresponding to the opposite entity; the bidirectional identity authentication of the access controller and the request equipment is realized, so that only a legal user can access a legal network. Moreover, the private information of the entity, such as the identity label and the authentication result information, is transmitted in a ciphertext form, so that the transmission security of the private information is ensured, and the identity protection of the entity is realized.

Description

technical field [0001] The present application relates to the technical field of network communication security, and in particular, to an identity authentication method and device. Background technique [0002] In a communication network, it is usually required to perform two-way authentication between the requesting device and the authenticating access controller to ensure that the requesting device accessing the network belongs to a legitimate user and that the network that the requesting device accesses belongs to a legitimate network. In addition, the point-to-point transmission in the blockchain technology also needs to establish a trust relationship between different nodes, so it is also very important for the identification of nodes. [0003] At present, in the existing entity authentication scheme, the identity certificate of the entity either adopts a digital certificate or a pre-shared key. One end uses the pre-shared key as the identity credential, which poses a ...

AI Technical Summary

Problems solved by technology

[0003] At present, in the existing entity authentication schemes, the identity certificate of the entity either adopts a digital certificate or a pre-shared key uniformly. The situation where one end uses a pre-shared key as an identity credential poses a challenge to the entity identity authentication mechanism

In addition, during the transmission of identity authentication messages, the identity information of the entity is often exposed, and the identity information of the entity usually includes some private or sensitive information, such as ID number, home address, bank card information, geographic location information or affiliation. Institutional information, etc., if intercepted by attackers and used for illegal activities, the consequences will be unimaginable. How to complete entity identity authentication without revealing identity-sensitive information has become a top priority

Images