Identity authentication method and system

Abstract

The application relates to an identity authentication method and system. In the method, a claiming party determines an asymmetric digital signature algorithm and a post-quantum digital signature algorithm, generates algorithm identifiers corresponding to the asymmetric digital signature algorithm and the post-quantum digital signature algorithm, acquires a time-varying parameter, generates signature data according to the time-varying parameter and an identifier of a verifying party, signs the signature data by using the asymmetric digital signature algorithm to obtain a first signature, signs the signature data by using the post-quantum digital signature algorithm to obtain a second signature, generates an identity authentication string according to the algorithm identifiers, the signature data, the first signature and the second signature, and sends the identity authentication string to the verifying party to instruct the verifying party to perform identity authentication according to the identity authentication string. The method introduces the post-quantum digital signature algorithm capable of resisting quantum computing on the basis of traditional asymmetric password identity authentication, improves the security of communication parties in the identity authentication process, and can resist quantum threats to a certain extent.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of network security, in particular to an identity authentication method and system. BACKGROUND

[0002] In the identity authentication process based on asymmetric cryptography, a communication entity proves its identity by showing that it possesses a certain private signature key, which is done by the communication entity signing specific data using its private signature key. With the continuous breakthroughs in quantum computing hardware and the emergence of quantum algorithms such as Shor and Grover, the current public key cryptography has been greatly threatened. The digital signature algorithms used in the current identity authentication based on asymmetric cryptography are mostly RSA or elliptic curve, and the development of quantum computing and quantum algorithms will affect their security. SUMMARY

[0003] Therefore, it is necessary to provide an identity authentication method and system to improve the security of the communication parties in the identity authentication process.

[0004] In a first aspect, the present application provides an identity authentication method, which is applied to a claimant, and includes the following steps:

[0005] determining a first asymmetric digital signature algorithm and a first post-quantum digital signature algorithm;

[0006] generating a first algorithm identifier corresponding to the first asymmetric digital signature algorithm and the first post-quantum digital signature algorithm;

[0007] obtaining a first time-varying parameter and generating first signature data according to the first time-varying parameter and an identifier of a verifier;

[0008] signing the first signature data by using the first asymmetric digital signature algorithm to obtain a first signature;

[0009] signing the first signature data by using the first post-quantum digital signature algorithm to obtain a second signature;

[0010] generating a first identity authentication string according to the first algorithm identifier, the first signature data, the first signature and the second signature;

[0011] sending the first identity authentication string to the verifier to instruct the verifier to perform identity authentication according to the first identity authentication string.

[0012] In one of the embodiments, the method further includes the following steps:

[0013] obtaining request data from the verifier; the request data includes a random number generated by the verifier;

[0014] obtaining a time-varying parameter, including:

[0015] the random number as the first time-varying parameter.

[0016] In one of the embodiments, the method further comprises:

[0017] receiving a second identity authentication string from the verifier;

[0018] performing identity authentication according to the second identity authentication string;

[0019] if the identity authentication according to the second identity authentication string is passed and the identity authentication passing information is received from the verifier, determining that the two-way identity authentication is successful.

[0020] In one of the embodiments, the second identity authentication string comprises a second algorithm identifier, second signature data, a third signature and a fourth signature.

[0021] The identity authentication according to the second identity authentication string comprises:

[0022] determining whether the second asymmetric digital signature algorithm and the second post-quantum digital signature algorithm indicated by the second algorithm identifier are supported;

[0023] if the second asymmetric digital signature algorithm and the second post-quantum digital signature algorithm are supported, verifying whether the second time-varying parameter carried in the second signature data is valid and whether the identity of the claimant carried in the second signature data is correct;

[0024] if the second time-varying parameter is valid and the identity of the claimant is correct, obtaining the first public key and the second public key of the verifier;

[0025] verifying the third signature according to the first public key and verifying the fourth signature according to the second public key;

[0026] if the third signature and the fourth signature are both verified successfully, determining that the identity authentication is passed.

[0027] In one of the embodiments, the step of obtaining the first public key and the second public key of the verifier comprises at least one of the following:

[0028] receiving a digital signature certificate and a post-quantum digital signature certificate from the verifier, and obtaining the first public key from the digital signature certificate and the second public key from the post-quantum digital signature certificate after verifying that the digital signature certificate and the post-quantum digital signature certificate are both valid;

[0029] obtaining the first public key and the second public key of the verifier from a preset storage space, the preset storage space being used for storing algorithm public keys agreed in advance;

[0030] inquiring the first public key and the second public key of the verifier from a trusted third party.

[0031] In a second aspect, the present application also provides an identity authentication method, the method being applied to a verifier and comprising the following steps of:

[0032] receiving a first identity authentication string from a claimant, wherein the first identity authentication string is generated by the claimant according to the following steps: determining a first asymmetric digital signature algorithm and a first post-quantum digital signature algorithm; generating a first algorithm identifier corresponding to the first asymmetric digital signature algorithm and the first post-quantum digital signature algorithm; obtaining a first time-varying parameter and generating first signature data according to the first time-varying parameter and an identifier of the verifier; signing the first signature data by using the first asymmetric digital signature algorithm to obtain a first signature; signing the first signature data by using the first post-quantum digital signature algorithm to obtain a second signature; and generating the first identity authentication string according to the first algorithm identifier, the first signature data, the first signature and the second signature;

[0033] performing identity authentication according to the first identity authentication string.

[0034] In one of the embodiments, the method further comprises the following steps of:

[0035] determining a second asymmetric digital signature algorithm and a second post-quantum digital signature algorithm;

[0036] generating a second algorithm identifier corresponding to the second asymmetric digital signature algorithm and the second post-quantum digital signature algorithm;

[0037] obtaining a second time-varying parameter and generating second signature data according to the second time-varying parameter and an identifier of the claimant;

[0038] signing the second signature data by using the second asymmetric digital signature algorithm to obtain a third signature;

[0039] signing the second signature data by using the second post-quantum digital signature algorithm to obtain a fourth signature;

[0040] generating a second identity authentication string according to the second algorithm identifier, the second signature data, the third signature and the fourth signature;

[0041] sending the second identity authentication string to the claimant to instruct the claimant to perform identity authentication according to the second identity authentication string;

[0042] if the identity authentication according to the first identity authentication string is passed and identity authentication passing information is received from the claimant, determining that the two-way identity authentication is successful.

[0043] In one of the embodiments, the identity authentication according to the first identity authentication string comprises the following steps of:

[0044] determining whether the first asymmetric digital signature algorithm and the first post-quantum digital signature algorithm indicated by the first algorithm identifier are supported;

[0045] if the first asymmetric digital signature algorithm and the first post-quantum digital signature algorithm are supported, verifying whether the first time-varying parameter carried in the first signature data is valid, and verifying whether the identity of the verifier carried in the first signature data is correct;

[0046] if the first time-varying parameter is valid and the identity of the verifier is correct, obtaining the third public key and the fourth public key of the claimant;

[0047] verifying the first signature according to the third public key and verifying the second signature according to the fourth public key;

[0048] if the first signature and the second signature are both verified successfully, determining that the identity authentication is passed.

[0049] In one of the embodiments, before receiving the first identity authentication string from the claimant, the method further comprises:

[0050] generating a random number;

[0051] sending a request data to the claimant according to the random number, to instruct the claimant to take the random number as the first time-varying parameter;

[0052] verifying whether the first time-varying parameter carried in the first signature data is valid, comprising:

[0053] verifying whether the first time-varying parameter carried in the first signature data is consistent with the generated random number;

[0054] if consistent, determining that the first time-varying parameter is valid.

[0055] In a third aspect, the present application further provides an identity authentication system, comprising a claimant and a verifier; wherein:

[0056] the claimant is configured to implement the steps of the method of the first aspect as described above when a computer program is executed;

[0057] the verifier is configured to implement the steps of the method of the second aspect as described above when a computer program is executed.

[0058] The identity authentication method and system, the claiming party determines a first asymmetric digital signature algorithm and a first post-quantum digital signature algorithm, generates a first algorithm identifier corresponding to the first asymmetric digital signature algorithm and the first post-quantum digital signature algorithm, acquires a first time-varying parameter, generates first signature data according to the first time-varying parameter and an identifier of the verifying party, signs the first signature data by using the first asymmetric digital signature algorithm to obtain a first signature, signs the first signature data by using the first post-quantum digital signature algorithm to obtain a second signature, generates a first identity authentication string according to the first algorithm identifier, the first signature data, the first signature and the second signature, and sends the first identity authentication string to the verifying party to instruct the verifying party to perform identity authentication according to the first identity authentication string. In this way, on the basis of the traditional asymmetric password identity authentication, the post-quantum digital signature algorithm capable of resisting quantum computing is introduced, the asymmetric digital signature algorithm and the post-quantum digital signature algorithm are combined, so that only cracking one kind of algorithm cannot completely break the security line of the identity authentication, the security of the two parties in the identity authentication process is improved, and the quantum threat can be resisted to a certain extent. BRIEF DESCRIPTION OF DRAWINGS

[0059] In order to more clearly illustrate the technical solutions in the embodiments of the present application or the related art, the drawings needed to be used in the description of the embodiments of the present application or the related art will be briefly introduced. Obviously, the drawings in the following description are only some embodiments of the present application, and other related drawings can be obtained by those skilled in the art without creative labor.

[0060] Figure 1 An application environment diagram of the identity authentication method in an embodiment;

[0061] Figure 2 A flowchart of the identity authentication method in an embodiment;

[0062] Figure 3 An identity authentication interaction diagram in an embodiment;

[0063] Figure 4 A flowchart of the two-way authentication steps in an embodiment;

[0064] Figure 5 A two-way authentication interaction diagram in an embodiment;

[0065] Figure 6 A flowchart of the identity authentication method in another embodiment;

[0066] Figure 7 A flowchart of the identity authentication method applied to the identity authentication system in an embodiment;

[0067] Figure 8 This is a flowchart illustrating an identity authentication method applied to an identity authentication system in another embodiment;

[0068] Figure 9 This is a flowchart illustrating an identity authentication method applied to an identity authentication system in yet another embodiment. Detailed Implementation

[0069] To make the objectives, technical solutions, and advantages of this application clearer, the following detailed description is provided in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative and not intended to limit the scope of this application.

[0070] It is understood that the terms "first," "second," etc., used in this application may be used herein to describe various elements, but these elements are not limited by these terms. These terms are only used to distinguish the first element from another element. For example, without departing from the scope of this application, the first signature data may be referred to as the second signature data, and similarly, the second signature data may be referred to as the first signature data. Both the first signature data and the second signature data are signature data, but they are not the same signature data.

[0071] The identity authentication method provided in this application embodiment can be applied to, for example, Figure 1 In the application environment shown, the identity authentication system includes a claimant 102 and a verifier 104. The claimant 102 and verifier 104 communicate via a network and perform identity authentication based on the identity authentication method provided in any embodiment of this application. Both the claimant 102 and verifier 104 are communication entities and can be, but are not limited to, various personal computers, laptops, smartphones, tablets, IoT devices, portable wearable devices, and servers. IoT devices can be smart speakers, smart TVs, smart air conditioners, smart in-vehicle devices, projection devices, etc. Portable wearable devices can be smartwatches, smart bracelets, head-mounted devices, etc. Head-mounted devices can be virtual reality (VR) devices, augmented reality (AR) devices, smart glasses, etc. The server can be a standalone physical server, a server cluster or distributed system composed of multiple physical servers, or a cloud server providing cloud computing services.

[0072] Exemplarily, the claimant 102 is an application device, and the verifier 104 is a key distribution device. Based on the identity authentication method provided in the present application, identity authentication between the application device and the quantum key distribution device can be achieved. Exemplarily, the claimant 102 is a terminal device, and the verifier 104 is a platform. Based on the identity authentication method provided in the present application, identity authentication of various devices accessing the platform can be achieved. Exemplarily, based on the identity authentication method provided in the present application, identity authentication before a secure communication channel is established by the two communication parties can be achieved.

[0073] In one exemplary embodiment, as shown in Figure 2 , an identity authentication method is provided. The method is applied to the claimant 102 in Figure 1 for example, and includes the following steps.

[0074] In step 202, a first asymmetric digital signature algorithm and a first post-quantum digital signature algorithm are determined.

[0075] The claimant automatically selects or selects the identity authentication mode under the configuration of the user, that is, selects the traditional asymmetric digital signature algorithm and the post-quantum digital signature algorithm to be used, determines the first asymmetric digital signature algorithm and the first post-quantum digital signature algorithm to be used in the identity authentication. The post-quantum digital signature algorithm (PQC) is a new generation of cryptographic algorithm that can resist quantum computing attacks on existing cryptographic algorithms, and can ensure the security of the cryptographic algorithm in a quantum environment.

[0076] Optionally, in order to be more practical, the embodiment of the present application provides three optional identity authentication modes of “traditional+PQC” digital signature, “single PQC” digital signature, and “traditional” digital signature for the two communication parties to use, and each mode is distinguished by different codes to ensure the usability, compatibility and security of the identity authentication method. The “traditional+PQC” digital signature refers to identity authentication by combining the use of the asymmetric digital signature algorithm and the post-quantum digital signature algorithm; the “single PQC” digital signature refers to identity authentication by using the post-quantum digital signature algorithm alone; and the “traditional” digital signature refers to identity authentication by using the traditional asymmetric digital signature algorithm alone. It can be understood that since the migration from traditional cryptography to post-quantum cryptography is a long-term process, the method provided in the embodiment can be compatible with the traditional identity authentication method through a small amount of modification, while supporting the “traditional+PQC” digital signature and the “single PQC” digital signature, and as much as possible to include the future evolution direction, and gradually realize the improvement of security through smooth upgrade and modification.

[0077] In step 204, a first algorithm identifier corresponding to the first asymmetric digital signature algorithm and the first post-quantum digital signature algorithm is generated.

[0078] The first algorithm identifier refers to an identity authentication mode code, which is used to indicate which asymmetric digital signature algorithm and which post-quantum digital signature algorithm are used in this identity authentication. Optionally, the label corresponding to each asymmetric digital signature algorithm and the label corresponding to each post-quantum digital signature algorithm are preset in advance, the label corresponding to the first asymmetric digital signature algorithm is queried, and the label corresponding to the first post-quantum digital signature algorithm is queried, and the two are integrated to determine the corresponding first algorithm identifier.

[0079] In an optional implementation, the algorithm identifier consists of two hexadecimal numbers, and a value of 0 indicates that no such digital signature algorithm is used. For example, a value of 0 in the low bit represents a “single PQC” digital signature, a value of 0 in the high bit represents a “traditional” digital signature, and a value of non-0 in both the high bit and the low bit represents a “traditional + PQC” digital signature.

[0080] For example, the identity authentication mode code “0x0N” has a value of 0 in the high bit and a value of N in the low bit, indicating that a traditional asymmetric digital signature algorithm is used in this identity authentication. The identity authentication mode code “0xMN” has a value of M in the high bit and a value of N in the low bit, indicating that a traditional asymmetric digital signature algorithm and a post-quantum digital signature algorithm are used in this identity authentication. The identity authentication mode code “0xM0” has a value of M in the high bit and a value of 0 in the low bit, indicating that a post-quantum digital signature algorithm is used in this identity authentication.

[0081] Referring to Table 1, Table 1 records the corresponding post-quantum digital signature algorithm when the high bit M has different values.

[0082] Table 1:

[0083]

[0084] Referring to Table 2, Table 2 records the corresponding asymmetric digital signature algorithm when the low bit N has different values.

[0085] Table 2:

[0086]

[0087] It can be understood that the above Table 1 and Table 2 are only examples, and in actual use, the code can be extended and adjusted according to the supported algorithms. For example, if a certain traditional public key cryptography algorithm or a certain post-quantum cryptography algorithm is proved to be insecure, the platform can be configured to quickly exclude the insecure algorithm in the terminal and platform interaction scenario. Furthermore, if a new post-quantum cryptography algorithm is born, it can also be upgraded by adding a code, without affecting the overall business process.

[0088] Referring to Table 1 and Table 2, in the case of the "traditional + PQC" digital signature, the algorithm used is determined jointly by the high and low bits, for example, the code "0x23" represents that the FIPS 205 (SLH-DSA) is used as the post-quantum digital signature algorithm and the SM2 digital signature algorithm is used as the asymmetric digital signature algorithm this time.

[0089] In step 206, a first time-varying parameter is obtained, and first signature data is generated according to the first time-varying parameter and the identity of the verifier.

[0090] The value of the time-varying parameter changes over time. Optionally, the time-varying parameter in this embodiment is any one of a timestamp, a serial number, and a random number generated by the verifier and sent out. The first signature data in this embodiment is composed of the first time-varying parameter and the identity of the verifier.

[0091] In step 208, the first signature data is signed using a first asymmetric digital signature algorithm to obtain a first signature.

[0092] In step 210, the first signature data is signed using a first post-quantum digital signature algorithm to obtain a second signature.

[0093] In step 212, a first identity authentication string is generated according to the first algorithm identity, the first signature data, the first signature, and the second signature.

[0094] In an optional implementation, if the claimant and the verifier have agreed on which traditional asymmetric digital signature algorithm and which post-quantum digital signature algorithm to use, steps 202 and 204 do not need to be performed, and the first identity authentication string is generated according to the first signature data, the first signature, and the second signature, without the need to send the identity authentication mode code.

[0095] In step 214, the first identity authentication string is sent to the verifier to instruct the verifier to perform identity authentication according to the first identity authentication string.

[0096] Wherein, assuming that the first algorithm identity is C1, the first signature data is M1, the first signature is S1, and the second signature is S2, the claimant sends the first identity authentication string C1||M1||S1||S2 to the verifier, and the verifier performs identity authentication according to the first identity authentication string.

[0097] In an optional implementation, the claimant sends the first identity authentication string to the verifier while also sending a digital signature certificate and a post-quantum digital signature certificate for use by the verifier.

[0098] In an optional implementation, if the claimant determines that the first asymmetric digital signature algorithm and the first post-quantum digital signature algorithm are to be used for this identity authentication, the claimant continues to perform steps 204 to 214.

[0099] If it is determined that the current identity authentication only uses the first asymmetric digital signature algorithm, an algorithm identifier corresponding to the first asymmetric digital signature algorithm is generated; a first time-varying parameter is obtained, and a first signature data is generated according to the first time-varying parameter and the identifier of the verifier; the first signature data is signed by using the first asymmetric digital signature algorithm to obtain a first signature; an identity authentication string is generated according to the algorithm identifier, the first signature data and the first signature; and the identity authentication string is sent to the verifier to instruct the verifier to perform identity authentication according to the identity authentication string.

[0100] If it is determined that the current identity authentication only uses the first post-quantum digital signature algorithm, an algorithm identifier corresponding to the first post-quantum digital signature algorithm is generated; a first time-varying parameter is obtained, and a first signature data is generated according to the first time-varying parameter and the identifier of the verifier; the first signature data is signed by using the first post-quantum digital signature algorithm to obtain a second signature; an identity authentication string is generated according to the algorithm identifier, the first signature data and the second signature; and the identity authentication string is sent to the verifier to instruct the verifier to perform identity authentication according to the identity authentication string.

[0101] The identity authentication process of the verifier is not limited in this embodiment. Alternatively, the verifier performs identity authentication in the following manner: it is judged whether the first asymmetric digital signature algorithm and the first post-quantum digital signature algorithm indicated by the first algorithm identifier are supported; if the first asymmetric digital signature algorithm and the first post-quantum digital signature algorithm are supported, it is verified whether the first time-varying parameter carried in the first signature data is valid, and whether the identifier of the verifier carried in the first signature data is correct; if the first time-varying parameter is valid and the identifier of the verifier is correct, the third public key and the fourth public key of the claimant are obtained; the first signature is verified according to the third public key, and the second signature is verified according to the fourth public key; if the first signature and the second signature are both verified successfully, it is determined that the identity authentication is passed.

[0102] In the above identity authentication method, on the basis of the traditional asymmetric cryptographic identity authentication, the post-quantum digital signature algorithm capable of resisting quantum computing is introduced, and the asymmetric digital signature algorithm and the post-quantum digital signature algorithm are combined, so that only cracking one of the algorithms cannot completely break the security line of the identity authentication, the security of the communication parties in the identity authentication process is improved, and the quantum threat can be resisted to a certain extent.

[0103] In an exemplary embodiment, the method further comprises: obtaining request data from the verifier; the request data includes a random number generated by the verifier; and obtaining the time-varying parameter comprises: taking the random number as the first time-varying parameter.

[0104] In the above identity authentication method, on the basis of the traditional asymmetric cryptographic identity authentication, the post-quantum digital signature algorithm capable of resisting quantum computing is introduced, and the asymmetric digital signature algorithm and the post-quantum digital signature algorithm are combined, so that only cracking one of the algorithms cannot completely break the security line of the identity authentication, the security of the communication parties in the identity authentication process is improved, and the quantum threat can be resisted to a certain extent. Figure 3The method further includes: the claiming party sending a request to the verifying party, the verifying party generating the first identity authentication string in response to the request, and the verifying party sending the first identity authentication string to the claiming party.

[0105] In the embodiment, the challenge / response mechanism is used, and the challenge is initiated by the verifying party to ensure the uniqueness and timeliness of the authentication process by generating and verifying the challenge random number.

[0106] In an exemplary embodiment, as shown in Figure 4 The method further includes:

[0107] At step 402, the second identity authentication string is received from the verifying party.

[0108] The second identity authentication string is a credential generated by the verifying party for identity authentication. Optionally, the verifying party generates the second identity authentication string in the same way as the claiming party generates the first identity authentication string, and the specific steps include: determining a second asymmetric digital signature algorithm and a second post-quantum digital signature algorithm; generating a second algorithm identifier corresponding to the second asymmetric digital signature algorithm and the second post-quantum digital signature algorithm; obtaining a second time-varying parameter, and generating second signature data according to the second time-varying parameter and the identity of the claiming party; signing the second signature data by using the second asymmetric digital signature algorithm to obtain a third signature; signing the second signature data by using the second post-quantum digital signature algorithm to obtain a fourth signature; generating the second identity authentication string according to the second algorithm identifier, the second signature data, the third signature, and the fourth signature; and sending the second identity authentication string to the claiming party.

[0109] In an optional implementation, the claiming party selects any one of the “traditional+PQC” digital signature, the “single PQC” digital signature, and the “traditional” digital signature as the identity authentication mode; and the verifying party can also select any one of the “traditional+PQC” digital signature, the “single PQC” digital signature, and the “traditional” digital signature as the identity authentication mode.

[0110] At step 404, identity authentication is performed according to the second identity authentication string.

[0111] The identity authentication logic adopted by the claiming party and the verifying party is the same. The specific identity authentication mode is not limited in the embodiment.

[0112] At step 406, if the identity authentication according to the second identity authentication string is passed, and the identity authentication passing information is received from the verifying party, it is determined that the bidirectional identity authentication is successful.

[0113] The verification party sends identity authentication pass information to the claiming party after identity authentication based on the first identity authentication string is passed. The claiming party determines that the two-way identity authentication is successful and the identity authentication process is completed if the identity authentication of the claiming party and the identity authentication of the verification party are both passed. If the identity authentication of the claiming party or the identity authentication of the verification party fails, the claiming party determines that the two-way identity authentication fails.

[0114] In an optional implementation, with reference to Figure 5 , the identity authentication method comprises the following steps: 1. The claiming party generates a first identity authentication string and sends the first identity authentication string to the verification party; 2. The verification party performs identity authentication based on the first identity authentication string; 3. The verification party sends identity authentication pass information to the claiming party after the identity authentication is passed; 4. The verification party generates a second identity authentication string and sends the second identity authentication string to the claiming party; 5. The claiming party performs identity authentication based on the second identity authentication string; 6. The claiming party sends identity authentication pass information to the verification party after the identity authentication is passed; 7. The claiming party determines that the two-way identity authentication is successful if the identity authentication is passed and the identity authentication pass information sent by the verification party is received; 8. The verification party determines that the two-way identity authentication is successful if the identity authentication is passed and the identity authentication pass information sent by the claiming party is received. In the method, Figure 5 only as an example, the present embodiment does not limit the order of steps 1 and 4; steps 3 and 4 can be performed simultaneously or separately; similarly, steps 1 and 6 can be performed simultaneously or separately.

[0115] In the present embodiment, the two-way identity authentication of the two parties in communication can be realized based on the interaction between the claiming party and the verification party.

[0116] In an exemplary embodiment, the second identity authentication string comprises a second algorithm identifier, second signature data, a third signature, and a fourth signature; step 404 comprises: determining whether the second asymmetric digital signature algorithm and the second post-quantum digital signature algorithm indicated by the second algorithm identifier are supported; if the second asymmetric digital signature algorithm and the second post-quantum digital signature algorithm are supported, verifying whether the second time-varying parameter carried in the second signature data is valid and whether the identity of the claiming party carried in the second signature data is correct; if the second time-varying parameter is valid and the identity of the claiming party is correct, obtaining the first public key and the second public key of the verification party; verifying the third signature based on the first public key and verifying the fourth signature based on the second public key; and if the third signature and the fourth signature are both verified successfully, determining that the identity authentication is passed.

[0117] If the second asymmetric digital signature algorithm indicated by the second algorithm identifier indication is not supported, or the second post-quantum digital signature algorithm indicated by the second algorithm identifier indication is not supported, it is determined that the identity authentication fails, and identity authentication failure information is returned to the verifier. If the second time-varying parameter is invalid, or the identity of the claimant is incorrect, it is determined that the identity authentication fails, and identity authentication failure information is returned to the verifier. If the third signature or the fourth signature fails verification, it is determined that the identity authentication fails, and identity authentication failure information is returned to the verifier.

[0118] In an exemplary embodiment, the step of obtaining the first public key and the second public key of the verifier includes at least one of the following: receiving a digital signature certificate and a post-quantum digital signature certificate from the verifier, obtaining the first public key from the digital signature certificate and the second public key from the post-quantum digital signature certificate after verifying that both the digital signature certificate and the post-quantum digital signature certificate are valid; obtaining the first public key and the second public key of the verifier from a preset storage space, the preset storage space being used to store algorithm public keys agreed in advance; and querying the first public key and the second public key of the verifier from a trusted third party.

[0119] The first public key is a public key of an asymmetric digital signature algorithm used by the verifier, and the second public key is a public key of a post-quantum digital signature algorithm used by the verifier.

[0120] In an implementation, the verifier sends the digital signature certificate and the post-quantum digital signature certificate to the claimant at the same time as sending the second identity authentication string to the claimant. The claimant verifies whether the digital signature certificate and the post-quantum digital signature certificate are valid at any one of the steps before obtaining the first public key and the second public key of the verifier, and obtains the first public key from the digital signature certificate and the second public key from the post-quantum digital signature certificate after verifying that both the digital signature certificate and the post-quantum digital signature certificate are valid.

[0121] In another implementation, the claimant preinstalls the traditional algorithm public key and the post-quantum algorithm public key of the verifier in a preset storage space in advance. For example, the verifier is an application platform, and the public key is preinstalled online or offline in advance during the registration process of the claimant.

[0122] In another implementation, the traditional algorithm public key and the post-quantum algorithm public key of the claimant or the verifier are maintained by a trusted third party, and the traditional algorithm public key and the post-quantum algorithm public key are obtained by the claimant or the verifier by inquiring the trusted third party before identity authentication.

[0123] In an exemplary embodiment, as shown in Figure 6 , an identity authentication method is provided. Taking the verifier 104 in Figure 1 as an example, the method includes the following steps:

[0124] Step 602, receiving a first identity authentication string from the claiming party; wherein the first identity authentication string is generated by the claiming party according to the following steps: determining a first asymmetric digital signature algorithm and a first post-quantum digital signature algorithm; generating a first algorithm identifier corresponding to the first asymmetric digital signature algorithm and the first post-quantum digital signature algorithm; obtaining a first time-varying parameter, and generating first signature data according to the first time-varying parameter and the identifier of the verifying party; signing the first signature data using the first asymmetric digital signature algorithm to obtain a first signature; signing the first signature data using the first post-quantum digital signature algorithm to obtain a second signature; and generating the first identity authentication string according to the first algorithm identifier, the first signature data, the first signature, and the second signature.

[0125] Step 604, identity authentication according to the first identity authentication string.

[0126] Wherein, the explanation of steps 602 to 604 can refer to the aforementioned explanation of the identity authentication method applied to the claiming party, which will not be repeated here.

[0127] In the above identity authentication method, on the basis of traditional asymmetric cryptographic identity authentication, a post-quantum digital signature algorithm capable of resisting quantum computing is introduced, and the asymmetric digital signature algorithm and the post-quantum digital signature algorithm are combined, so that only cracking one of the algorithms cannot completely break the security line of the identity authentication, and the security of the communication parties in the identity authentication process is improved, which can resist quantum threats to a certain extent.

[0128] In an exemplary embodiment, the method further comprises: determining a second asymmetric digital signature algorithm and a second post-quantum digital signature algorithm; generating a second algorithm identifier corresponding to the second asymmetric digital signature algorithm and the second post-quantum digital signature algorithm; obtaining a second time-varying parameter, and generating second signature data according to the second time-varying parameter and the identifier of the claiming party; signing the second signature data using the second asymmetric digital signature algorithm to obtain a third signature; signing the second signature data using the second post-quantum digital signature algorithm to obtain a fourth signature; generating a second identity authentication string according to the second algorithm identifier, the second signature data, the third signature, and the fourth signature; sending the second identity authentication string to the claiming party to instruct the claiming party to perform identity authentication according to the second identity authentication string; and determining that the two-way identity authentication is successful if the identity authentication according to the first identity authentication string is passed and identity authentication passing information is received from the claiming party.

[0129] Wherein, assuming that the second algorithm identifier is C2, the second signature data is M2, the third signature is S3, and the fourth signature is S4, the logic of generating the first identity authentication string by the claiming party is the same, the verifying party generates a second identity authentication string C2||M2||S3||S4, and sends the second identity authentication string to the claiming party, and the claiming party performs identity authentication according to the second identity authentication string.

[0130] Referring to Figure 5 After the identity authentication of the claimant according to the second identity authentication string is passed, the claimant sends identity authentication passing information to the verifier. The verifier determines that the two-way identity authentication is successful and the identity authentication process is completed when it is determined that the identity authentication of the verifier is passed and the identity authentication of the claimant is passed. If the identity authentication of the verifier fails or the identity authentication of the claimant fails, the verifier determines that the two-way identity authentication fails.

[0131] In an exemplary embodiment, step 604 comprises: determining whether the first asymmetric digital signature algorithm and the first post-quantum digital signature algorithm indicated by the first algorithm identifier are supported; if the first asymmetric digital signature algorithm and the first post-quantum digital signature algorithm are supported, verifying whether the first time-varying parameter carried in the first signature data is valid and verifying whether the identity of the verifier carried in the first signature data is correct; if the first time-varying parameter is valid and the identity of the verifier is correct, obtaining the third public key and the fourth public key of the claimant; verifying the first signature according to the third public key and verifying the second signature according to the fourth public key; and if the first signature and the second signature are both verified successfully, determining that the identity authentication is passed.

[0132] If the first asymmetric digital signature algorithm indicated by the first algorithm identifier is not supported or the first post-quantum digital signature algorithm indicated by the first algorithm identifier is not supported, it is determined that the identity authentication fails, and identity authentication failure information is returned to the claimant. If the first time-varying parameter is invalid or the identity of the verifier is incorrect, it is determined that the identity authentication fails, and identity authentication failure information is returned to the claimant. If the first signature or the second signature fails to be verified, it is determined that the identity authentication fails, and identity authentication failure information is returned to the claimant.

[0133] In an alternative implementation, the step of obtaining the third public key and the fourth public key of the claimant comprises at least one of the following: receiving a digital signature certificate and a post-quantum digital signature certificate from the claimant, obtaining the third public key from the digital signature certificate and the fourth public key from the post-quantum digital signature certificate after verifying that the digital signature certificate and the post-quantum digital signature certificate are both valid; obtaining the third public key and the fourth public key of the claimant from a preset storage space, the preset storage space being used to store pre-agreed algorithm public keys; and querying the third public key and the fourth public key of the claimant from a trusted third party.

[0134] In an exemplary embodiment, before step 602, the method further comprises: generating a random number; and sending request data to the claimant according to the random number to instruct the claimant to take the random number as the first time-varying parameter.

[0135] The verification of the first time-varying parameter carried in the first signature data includes: verifying whether the first time-varying parameter carried in the first signature data is consistent with the generated random number; if consistent, the first time-varying parameter is determined to be valid.

[0136] The verification of the first time-varying parameter carried in the first signature data includes: verifying whether the first time-varying parameter carried in the first signature data is consistent with the generated random number; if consistent, the first time-varying parameter is determined to be valid. Figure 3 The verification of the first time-varying parameter carried in the first signature data includes: verifying whether the first time-varying parameter carried in the first signature data is consistent with the generated random number; if consistent, the first time-varying parameter is determined to be valid.

[0137] Optionally, the time-varying parameter in the embodiment is any one of a timestamp, a serial number and a random number. If the first time-varying parameter is a serial number, the verifier judges whether the serial number is greater than the serial number used in the previous authentication process when verifying, if yes, the first time-varying parameter is determined to be valid; if no, the identity authentication failure information is returned to the claimant.

[0138] It should be understood that, although each step in the flowchart involved in each embodiment as described above is displayed in sequence according to the arrow, these steps are not necessarily executed in sequence according to the arrow. Unless otherwise specified herein, the execution of these steps is not strictly limited in sequence, and these steps can be executed in other sequences. Moreover, at least part of the steps in the flowchart involved in each embodiment as described above can include multiple steps or stages, which are not necessarily executed at the same time, but can be executed at different times, and the execution sequence of these steps or stages is not necessarily sequential, but can be executed in rotation or alternation with at least part of other steps or steps or stages in other steps.

[0139] In an exemplary embodiment, as shown in Figure 1 The present application also provides an identity authentication system, which comprises a claimant and a verifier; wherein:

[0140] The claimant, when executing the computer program, implements the following steps: determining a first asymmetric digital signature algorithm and a first post-quantum digital signature algorithm; generating a first algorithm identifier corresponding to the first asymmetric digital signature algorithm and the first post-quantum digital signature algorithm; obtaining a first time-varying parameter, generating first signature data according to the first time-varying parameter and an identifier of the verifier; signing the first signature data using the first asymmetric digital signature algorithm to obtain a first signature; signing the first signature data using the first post-quantum digital signature algorithm to obtain a second signature; generating a first identity authentication string according to the first algorithm identifier, the first signature data, the first signature, and the second signature; and sending the first identity authentication string to the verifier.

[0141] The verifier, when executing the computer program, implements the following steps: receiving the first identity authentication string from the claimant; and performing identity authentication according to the first identity authentication string.

[0142] In an exemplary embodiment, the claimant, when executing the computer program, further implements the following steps: obtaining request data from the verifier; the request data including a random number generated by the verifier; and using the random number as the first time-varying parameter.

[0143] In an exemplary embodiment, the claimant, when executing the computer program, further implements the following steps: receiving a second identity authentication string from the verifier; performing identity authentication according to the second identity authentication string; and determining that the two-way identity authentication is successful if the identity authentication according to the second identity authentication string is passed and identity authentication pass information is received from the verifier.

[0144] In an exemplary embodiment, the second identity authentication string includes a second algorithm identifier, second signature data, a third signature, and a fourth signature; the claimant, when executing the computer program, further implements the following steps: determining whether to support a second asymmetric digital signature algorithm and a second post-quantum digital signature algorithm indicated by the second algorithm identifier; if the second asymmetric digital signature algorithm and the second post-quantum digital signature algorithm are supported, verifying whether a second time-varying parameter carried in the second signature data is valid and whether an identifier of the claimant carried in the second signature data is correct; if the second time-varying parameter is valid and the identifier of the claimant is correct, obtaining a first public key and a second public key of the verifier; verifying the third signature according to the first public key and verifying the fourth signature according to the second public key; and determining that the identity authentication is passed if the third signature and the fourth signature are both verified successfully.

[0145] In an exemplary embodiment, the claimant, when executing the computer program, further implements the following steps: receiving the digital signature certificate and the post-quantum digital signature certificate from the verifier, obtaining the first public key from the digital signature certificate and the second public key from the post-quantum digital signature certificate after verifying that both the digital signature certificate and the post-quantum digital signature certificate are valid; obtaining the first public key and the second public key of the verifier from a preset storage space, the preset storage space being used to store the algorithm public keys agreed in advance; and querying the first public key and the second public key of the verifier from a trusted third party.

[0146] In an exemplary embodiment, the verifier, when executing the computer program, further implements the following steps: determining the second asymmetric digital signature algorithm and the second post-quantum digital signature algorithm; generating a second algorithm identifier corresponding to the second asymmetric digital signature algorithm and the second post-quantum digital signature algorithm; obtaining a second time-varying parameter and generating second signature data according to the second time-varying parameter and the identifier of the claimant; signing the second signature data using the second asymmetric digital signature algorithm to obtain a third signature; signing the second signature data using the second post-quantum digital signature algorithm to obtain a fourth signature; generating a second identity authentication string according to the second algorithm identifier, the second signature data, the third signature, and the fourth signature; sending the second identity authentication string to the claimant to instruct the claimant to perform identity authentication according to the second identity authentication string; and determining that the two-way identity authentication is successful if the identity authentication according to the first identity authentication string is passed and identity authentication passing information is received from the claimant.

[0147] In an exemplary embodiment, the verifier, when executing the computer program, further implements the following steps: determining whether to support the first asymmetric digital signature algorithm and the first post-quantum digital signature algorithm indicated by the first algorithm identifier; if the first asymmetric digital signature algorithm and the first post-quantum digital signature algorithm are supported, verifying whether the first time-varying parameter carried in the first signature data is valid and whether the identifier of the verifier carried in the first signature data is correct; if the first time-varying parameter is valid and the identifier of the verifier is correct, obtaining the third public key and the fourth public key of the claimant; verifying the first signature according to the third public key and verifying the second signature according to the fourth public key; and determining that the identity authentication is passed if both the first signature and the second signature are verified successfully.

[0148] In an exemplary embodiment, the verifier, when executing the computer program, further implements the following steps: generating a random number; sending request data to the claimant according to the random number to instruct the claimant to use the random number as the first time-varying parameter; verifying whether the first time-varying parameter carried in the first signature data is consistent with the generated random number; and determining that the first time-varying parameter is valid if they are consistent.

[0149] In an optional implementation, with reference to Figure 7, the identity authentication method applied to the identity authentication system comprises the following steps:

[0150] 01. The claimant A selects an identity authentication mode, i.e. what kind of traditional asymmetric digital signature algorithm and what kind of post-quantum digital signature algorithm, and the corresponding mode code C; takes the current time stamp T as a time-varying parameter to form a signature data M together with the identity of the verifier B; performs traditional digital signature on M to obtain a signature S1 and performs post-quantum digital signature on M to obtain a signature S2.

[0151] 02. The claimant A sends an identity authentication string C||M||S1||S2 to the verifier B, and sends the traditional digital signature certificate and the post-quantum digital signature certificate of the claimant A.

[0152] 03. The verifier B receives the identity authentication string sent by the claimant A, judges whether the traditional asymmetric digital signature algorithm and the post-quantum digital signature algorithm indicated by C are supported, and returns an identity authentication failure information if not supported.

[0153] 04. If supported, it is judged whether the time stamp T in M is valid and whether the identity of the verifier B is correct, and an identity authentication failure information is returned if the time stamp T is invalid or the identity of the verifier B is incorrect.

[0154] 05. If the time stamp T is valid and the identity of the verifier B is correct, it is judged whether the traditional digital signature certificate and the post-quantum digital signature certificate of the claimant A are valid, or the traditional algorithm public key and the post-quantum algorithm public key of the claimant A are obtained through other ways (for example, pre-setting or obtaining from a trusted third party); and an identity authentication failure information is returned if the traditional digital signature certificate or the post-quantum digital signature certificate is invalid.

[0155] 06. If the traditional digital signature certificate and the post-quantum digital signature certificate are both valid, the signature S1 is verified according to the traditional algorithm public key of the claimant A, and the signature S2 is verified according to the post-quantum algorithm public key of the claimant A; an identity authentication failure information is returned if one of the signatures fails to pass the verification, and the identity authentication is successful if both of the signatures pass the verification.

[0156] In an optional implementation, referring to Figure 8 , the identity authentication method applied to the identity authentication system comprises the following steps:

[0157] 01. The claimant A selects an identity authentication mode, i.e. what kind of traditional asymmetric digital signature algorithm and what kind of post-quantum digital signature algorithm, and the corresponding mode code C; takes the current time stamp T as a time-varying parameter to form a signature data M together with the identity of the verifier B; performs traditional digital signature on M to obtain a signature S1 and performs post-quantum digital signature on M to obtain a signature S2.

[0158] 02. The claimant A sends an identity authentication string C||M||S1||S2 to the verifier B.

[0159] 03. The verifier B receives the identity authentication string sent by A, and judges whether the traditional asymmetric digital signature algorithm and the post-quantum digital signature algorithm shown by C are supported. If not, the identity authentication failure information is returned.

[0160] 04. If supported, it is verified whether the timestamp T in M is valid and whether the identity of the verifier B is correct. If the timestamp T is invalid or the identity of the verifier B is incorrect, the identity authentication failure information is returned.

[0161] 05. If the timestamp T is valid and the identity of the verifier B is correct, the verifier B obtains the preset traditional algorithm public key and post-quantum algorithm public key of A. If there is no traditional algorithm public key or post-quantum algorithm public key corresponding to A, the identity authentication failure information is returned.

[0162] 06. The signature S1 is verified according to the traditional algorithm public key of A, and the signature S2 is verified according to the post-quantum algorithm public key of A. If one of the signature verifications fails, the identity authentication failure information is returned. If both of the signature verifications pass, the identity authentication is successful.

[0163] In an optional implementation, referring to Figure 9 , the identity authentication method applied to the identity authentication system comprises the following steps:

[0164] 01. The claimant A selects an identity authentication mode, i.e. which traditional asymmetric digital signature algorithm and which post-quantum digital signature algorithm, and the corresponding mode code C. The current timestamp T is taken as a time-varying parameter, and the identity of the verifier B is taken as signature data M. The traditional digital signature is performed on M to obtain a signature S1, and the post-quantum digital signature is performed on M to obtain a signature S2.

[0165] 02. The claimant A sends the identity authentication string C||M||S1||S2 to the verifier B.

[0166] 03. The verifier B receives the identity authentication string sent by A, and judges whether the traditional asymmetric digital signature algorithm and the post-quantum digital signature algorithm shown by C are supported. If not, the identity authentication failure information is returned.

[0167] 04. If supported, it is verified whether the timestamp T in M is valid and whether the identity of the verifier B is correct. If the timestamp T is invalid or the identity of the verifier B is incorrect, the identity authentication failure information is returned.

[0168] 05. If the timestamp T is valid and the identity of the verifier B is correct, the verifier B obtains the traditional algorithm public key and post-quantum algorithm public key of A by inquiring a trusted third party. If there is no traditional algorithm public key or post-quantum algorithm public key corresponding to A, the identity authentication failure information is returned.

[0169] 06. Verify the signature S1 according to the traditional algorithm public key of A, verify the signature S2 according to the post-quantum algorithm public key of A, if one of the signature verification fails, return the identity authentication failure information, and if both of them pass, the identity authentication is successful.

[0170] It should be noted that the user information (including but not limited to user equipment information, user personal information, etc.) and data (including but not limited to data for analysis, stored data, displayed data, etc.) involved in the present application are all information and data authorized by the user or authorized by all parties, and the collection, use and processing of related data need to comply with relevant regulations.

[0171] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing the relevant hardware through a computer program. The computer program can be stored in a non-volatile computer readable storage medium, and when executed, can include the processes of the above-mentioned embodiment methods. Any reference to memory, database or other medium used in the embodiments provided in the present application can include at least one of non-volatile memory and volatile memory. The non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical storage, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetoresistive random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. The volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration but not limitation, the RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM), etc. The database involved in the embodiments provided in the present application can include at least one of a relational database and a non-relational database. The non-relational database can include a distributed database based on a block chain, etc., without being limited thereto. The processor involved in the embodiments provided in the present application can be a general-purpose processor, a central processing unit, a graphics processing unit, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, an artificial intelligence (AI) processor, etc., without being limited thereto.

[0172] The technical features of the above embodiments can be combined in any manner. To make the description concise, all possible combinations of the technical features in the above embodiments are not described, but as long as the combinations of the technical features do not exist contradictions, they should be considered as the scope of the present application.

[0173] The above-described embodiments are merely illustrative of several embodiments of the present application, and the description is relatively specific and detailed, but should not be understood as a limitation on the scope of the patent. It should be noted that for those skilled in the art, without departing from the concept of the present application, a number of modifications and improvements can be made, which are all within the scope of the present application. Therefore, the scope of protection of the present application should be subject to the appended claims.

Claims

1. An identity authentication method, characterized by, The method is applied to a claimant, and comprises: determining a first asymmetric digital signature algorithm and a first post-quantum digital signature algorithm; generating a first algorithm identifier corresponding to the first asymmetric digital signature algorithm and the first post-quantum digital signature algorithm; wherein the first algorithm identifier is an identity authentication mode code, which indicates which asymmetric digital signature algorithm and which post-quantum digital signature algorithm are used in this identity authentication; obtaining a first time-varying parameter, and generating first signature data according to the first time-varying parameter and an identifier of a verifier; signing the first signature data by using the first asymmetric digital signature algorithm to obtain a first signature; signing the first signature data by using the first post-quantum digital signature algorithm to obtain a second signature; generating a first identity authentication string according to the first algorithm identifier, the first signature data, the first signature and the second signature; sending the first identity authentication string to the verifier to instruct the verifier to perform identity authentication according to the first identity authentication string.

2. The method of claim 1, wherein, The method further comprises: obtaining request data from the verifier; the request data includes a random number generated by the verifier; The step of obtaining the first time-varying parameter comprises: taking the random number as the first time-varying parameter.

3. The method of claim 1, wherein, The method further comprises: receiving a second identity authentication string from the verifier; performing identity authentication according to the second identity authentication string; if the identity authentication according to the second identity authentication string is passed and identity authentication pass information is received from the verifier, determining that the two-way identity authentication is successful.

4. The method of claim 3, wherein, The second identity authentication string includes a second algorithm identifier, second signature data, a third signature and a fourth signature; The step of performing identity authentication according to the second identity authentication string comprises: judging whether the second asymmetric digital signature algorithm and the second post-quantum digital signature algorithm indicated by the second algorithm identifier are supported; if the second asymmetric digital signature algorithm and the second post-quantum digital signature algorithm are supported, verifying whether a second time-varying parameter carried in the second signature data is valid, and verifying whether an identifier of the claimant carried in the second signature data is correct; if the second time-varying parameter is valid and the identifier of the claimant is correct, obtaining a first public key and a second public key of the verifier; verifying the third signature according to the first public key and verifying the fourth signature according to the second public key; if the third signature and the fourth signature are both verified successfully, determining that the identity authentication is passed.

5. The method of claim 4, wherein, The step of obtaining the first public key and the second public key of the verifier comprises at least one of the following: receiving a digital signature certificate and a post-quantum digital signature certificate from the verifier, obtaining the first public key from the digital signature certificate and obtaining the second public key from the post-quantum digital signature certificate after verifying that the digital signature certificate and the post-quantum digital signature certificate are both valid; obtaining the first public key and the second public key of the verifier from a preset storage space, wherein the preset storage space is used to store algorithm public keys agreed in advance; inquiring the first public key and the second public key of the verifier from a trusted third party.

6. An identity authentication method characterized by, The method is applied to a verifier, and comprises: receiving a first identity authentication string from a claiming party; wherein the first identity authentication string is generated by the claiming party according to the following steps: determining a first asymmetric digital signature algorithm and a first post-quantum digital signature algorithm; generating a first algorithm identifier corresponding to the first asymmetric digital signature algorithm and the first post-quantum digital signature algorithm; obtaining a first time-varying parameter, and generating first signature data according to the first time-varying parameter and an identifier of a verifying party; signing the first signature data by using the first asymmetric digital signature algorithm to obtain a first signature; signing the first signature data by using the first post-quantum digital signature algorithm to obtain a second signature; and generating the first identity authentication string according to the first algorithm identifier, the first signature data, the first signature, and the second signature; wherein the first algorithm identifier is a code of an identity authentication mode, and is used to indicate which asymmetric digital signature algorithm and which post-quantum digital signature algorithm are used in the identity authentication; performing identity authentication according to the first identity authentication string.

7. The method of claim 6, wherein, The method further comprises: determining a second asymmetric digital signature algorithm and a second post-quantum digital signature algorithm; generating a second algorithm identifier corresponding to the second asymmetric digital signature algorithm and the second post-quantum digital signature algorithm; obtaining a second time-varying parameter, and generating second signature data according to the second time-varying parameter and an identifier of the claiming party; signing the second signature data by using the second asymmetric digital signature algorithm to obtain a third signature; signing the second signature data by using the second post-quantum digital signature algorithm to obtain a fourth signature; generating a second identity authentication string according to the second algorithm identifier, the second signature data, the third signature, and the fourth signature; sending the second identity authentication string to the claiming party to instruct the claiming party to perform identity authentication according to the second identity authentication string; if the identity authentication according to the first identity authentication string is passed and identity authentication passing information is received from the claiming party, determining that the two-way identity authentication is successful.

8. The method of claim 6, wherein, The identity authentication according to the first identity authentication string comprises: determining whether the first asymmetric digital signature algorithm and the first post-quantum digital signature algorithm indicated by the first algorithm identifier are supported; if the first asymmetric digital signature algorithm and the first post-quantum digital signature algorithm are supported, verifying whether the first time-varying parameter carried in the first signature data is valid, and verifying whether the identifier of the verifying party carried in the first signature data is correct; if the first time-varying parameter is valid and the identifier of the verifying party is correct, obtaining a third public key and a fourth public key of the claiming party; verifying the first signature according to the third public key, and verifying the second signature according to the fourth public key; if the first signature and the second signature are both verified successfully, determining that the identity authentication is passed.

9. The method of claim 8, wherein, Before the first identity authentication string is received from the claiming party, the method further comprises: generating a random number; sending request data to the claiming party according to the random number to instruct the claiming party to take the random number as the first time-varying parameter; The verifying whether the first time-varying parameter carried in the first signature data is valid comprises: verifying whether the first time-varying parameter carried in the first signature data is consistent with the generated random number; if consistent, determining that the first time-varying parameter is valid.

10. An identity authentication system characterized by comprising: The identity authentication system comprises a claiming party and a verifying party; wherein: The claiming party is configured to implement the steps of the method according to any one of claims 1 to 5 when executing a computer program; The verifying party is configured to implement the steps of the method according to any one of claims 6 to 9 when executing a computer program.

Images