Method for safety efficient network user identity discrimination

Abstract

This invention relates to a method for identifying network user identities, first of all, a customer end machine initiates an identification request, a network identification server generates a set of time stamps and random numbers and sends them to the customer machine and generates the life period T of the identification process, the customer machine and the server compute a set of symmetrical cryptographic keys and identification passwords separately, the passwords of the customer end are transmitted to the network identification server, which computes if T is finished, if so, it is the illegal user, if not, it compares if the passwords at both ends are the same, if so, they are legal and the log-on is successful otherwise they are illegal and the log-on is failed.

Description

Technical field: [0001] The invention relates to the field of information security, and uses cryptographic technology to identify network user identities. The technical method can prevent illegal or unauthorized network access, and is suitable for e-government, e-commerce, online banking, online games, and electronic national defense. Background technique: [0002] At present, the network identity authentication products based on cryptographic algorithms produced by some domestic and foreign manufacturers all use public key technology such as: PKI and IBE, etc. PKI technology needs to establish a CA digital certification center, and the establishment cost of PKI is high. 10,000 CA digital certification The center is: a sub-CA system and 10,000 databases need to be established, and the number of users that can only be managed is: 10 7 -10 8 , that is: the scale of management users is very limited. In addition, both PKI and IBE must establish a huge certificate or parameter d...

AI Technical Summary

Problems solved by technology

[0002] At present, the network identity authentication products based on cryptographic algorithms produced by some domestic and foreign manufacturers all use public key technology such as: PKI and IBE, etc. PKI technology needs to establish a CA digital certification center, and the establishment cost of PKI is high. 10,000 CA digital certification The center is: a sub-CA system and 10,000 databases need to be established, and the number of users that can only be managed is: 10 7 -10 8 , that is: the scale of management users is very limited. In addition, both PKI and IBE must establish a huge certificate or parameter database to provide online comparison and authentication for identity authentication, which is inefficient and requires manual intervention for key updates, so key update services must be delivered every year. The operating cost is very high, which makes the application and popularization of PKI and IBE technology more difficult

Images