Inter-authentication method and device

Abstract

The present invention provides a mutual authentication method capable of securely and easily performing mutual authentication. In the mutual authentication process, a secret key K0 is stored as an initial value in the client and the server. The client generates a random number R, calculates the password data C and authentication data A, and sends them to the server. The server receives authentication data A and password data C from the client and generates a random number R, calculates and sends back password data S and authentication data Q, and updates the hidden key K0 to a new hidden key K1. The client receives authentication data B and password data S from the server and generates a random number R, calculates password data C2 and authentication data A2 and sends a letter back to the server, and updates the hidden key K0 to a new hidden key K1. The client and server check for validity. Furthermore, in the authentication described above, identification information that can be used only once is used as a one-time ID in authentication between a plurality of devices or between applications, and the one-time ID is generated. In each of the devices or applications that perform the above-mentioned authentication, a variable common key that changes for each predetermined communication unit necessary for the above-mentioned authentication is generated, and at the same time, an expression of a one-way function that uses the variable common key as a parameter is obtained. function value.

Description

technical field [0001] The present invention relates to a method and device for mutual authentication of devices such as computer systems connected to a network, a method for generating a one-time ID used, an authentication method, an authentication system, a server, a client, and a program. [0002] In particular, the present invention relates to a mutual authentication method and device for at least authenticating the relationship between a first authentication device and a second authentication device, and a method for generating a one-time ID suitable for authentication between multiple devices or between applications , An authentication method, an authentication system, a server, a client, and a program using the above-mentioned one-time ID. Background technique [0003] On the network, a user must be authenticated in order to prove his identity. Authentication means that a prover proves his identity to a verifier through an arbitrary protocol, and it is an essential t...

AI Technical Summary

Problems solved by technology

[0021] Therefore, according to the above-mentioned P-SIGMA, the following effect can be obtained: by introducing the OID, the third party cannot identify the sender and receiver, but if the sender and receiver are legitimate, the OID as identification information can be grasped, At the same time, since the OID is changed every time communication is performed between the client and the server (that is, every time SA is generated or updated), a third party cannot predict the next OID

[0022] However, in the above-mentioned P-SIGMA, if the known common key is known once, all OIDs can be predicted. As a result, there is a problem that the future security of the OID cannot be guaranteed (that is, PFS: Perfect Forward Security)

[0023] In the above, the key exchange and authentication method called P-SIGMA has been described as a specific example, but in general, in the authentication method using a one-time ID to perform authentication between a plurality of devices or between applications, based on specific secret information Generate all one-time ids, also have the same problem as above

Images