A power 5G edge cloud identity authentication system and method
By designing a direct interaction power 5G edge cloud identity authentication system in 5G grid slices, using public user public keys and server public keys for authentication, the problem of large-sum-time delay in the authentication process in the prior art is solved, and the authentication process is achieved Efficient and safe certification process.
Patent Information
- Application Number
- CN202210331392.4
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2022-03-30
- Publication Date
- 2025-02-07
- Estimated Expiration
- 2042-03-30
AI Technical Summary
The authentication mechanism in the existing 5G grid slice has a large calculation overhead and a long transmission delay, which cannot effectively solve the performance bottlenecks in the authentication process.
A power 5G edge cloud identity authentication system was designed to directly interact between terminal devices and servers, and use public user public keys and server public keys to calculate and verify authentication information, avoiding dependence on infrastructure such as PKI.
Reduces the computational overhead and transmission delay of the authentication process, simplifies the deployment process, and protects the privacy and security of terminal devices and servers.
Smart Images

Figure CN114640997B_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the technical field of 5G slice authentication, and in particular to a power 5G edge cloud identity authentication system and method. Background Art
[0002] 5G network slicing of smart grids divides the shared physical infrastructure into multiple independent virtual networks, providing customized dedicated network services that are independently operated and isolated for different businesses. It is a key entry point for 5G services in vertical industries. Network slicing uses SDN / NFV technology to divide a single physical network into multiple virtual networks. Each slice represents an independent, virtualized end-to-end network from the wireless access network to the bearer network and the core network. The slices are insulated from each other to meet the different network requirements of various business scenarios. 5G network slicing allows operators to split multiple virtual logical end-to-end networks on the same hardware infrastructure. Each network slice is logically isolated from the access network to the transmission network and then to the core network, and can adapt to the various characteristics of different businesses 3, meeting the needs of large capacity, low latency, large connections, and multi-business support.
[0003] 5G network slicing as a whole includes four key technologies: access, transmission, and core network domain slicing technology, 5G network slicing identification and access technology, 5G network slicing end-to-end management technology, and 5G network slicing end-to-end SLA guarantee technology. Among them, access, transmission, and core network domain slicing enabling technology is used as the basic supporting technology to realize network slicing instances of access, transmission, and core networks; network slicing identification and access technology realizes the mapping of network slicing instances and terminal service types, and registers the terminal to the correct network slicing instance; 5G network slicing end-to-end management technology realizes the orchestration and management of end-to-end network slicing; network slicing end-to-end SLA guarantee technology can collect, analyze, and process network performance indicators in each domain in quasi-real time to ensure that the system performance meets the user's SLA requirements.
[0004] In existing power grid slices, the 5G authentication mechanism often requires the use of a public key infrastructure (PKI) to complete authentication. This authentication method has a large computational overhead and requires interaction with many security network elements during the authentication process, resulting in large transmission delays in the authentication process. Summary of the invention
[0005] Therefore, the technical problem to be solved by the present invention is to overcome the defects of the prior art in that the authentication process has high computational overhead and large transmission delay, thereby providing a power 5G edge cloud identity authentication system and method.
[0006] A first aspect of the present invention provides an electric power 5G edge cloud identity authentication system, including a server and a terminal device, wherein the server and the terminal device store the same multiple public user public keys and multiple public server public keys, the terminal device obtains a server string corresponding to a server identifier of the server, and calculates the server public key according to the server string and the public server public key; calculates first authentication information according to a first random number, a user private key, and a server public key, and sends the first authentication information and the first random number to the server, and the user private key is calculated according to the terminal identifier of the terminal device; the server obtains a terminal string corresponding to the terminal identifier of the terminal device, and calculates the user public key according to the terminal string and the public user public key; calculates second authentication information according to the first random number, the server private key, and the user public key, the calculation functions of the first authentication information and the second authentication information are the same, and the server private key is calculated according to the server identifier of the server; if the first authentication information is the same as the second authentication information, the server determines that the terminal device is a legitimate user.
[0007] Optionally, the electric power 5G edge cloud identity authentication system provided by the present invention also includes: the server calculates third authentication information based on the second random number, the user public key, and the server private key, and sends the second random number and the third authentication information to the terminal device; the terminal device calculates fourth authentication information based on the second random number, the user private key, and the server public key, and the calculation functions of the third authentication information and the fourth authentication information are the same; if the third authentication information is the same as the fourth authentication information, the terminal device determines that the server is a legal server.
[0008] Optionally, in the electric power 5G edge cloud identity authentication system provided by the present invention, it also includes calculating the server public key by the following formula: Where n represents the number of public server keys and / or the length of the server string. b represents the public key of the jth public server j Power, b j is the jth character in the server string; the first authentication information is calculated by the following formula: Wherein, h1() is the first hash function, N1 is the first random number, sk is the server public key Ui Power, sk Ui is the user's private key, and H() is the second hash function.
[0009] Optionally, in the electric power 5G edge cloud identity authentication system provided by the present invention, it also includes calculating the user public key by the following formula: Where n represents the number of public user keys and / or the length of the terminal string. a represents the jth public user's public key j Power, a jis the jth character in the terminal string; the second authentication information is calculated by the following formula: Wherein, h1() is the first hash function, N1 is the first random number, sk is the user's public key ISV Power, sk ISV is the server private key, and H() is the second hash function.
[0010] Optionally, in the electric power 5G edge cloud identity authentication system provided by the present invention, it also includes: calculating the third authentication information by the following formula: Wherein, h1() is the first hash function, N2 is the second random number, sk is the user's public key ISV Power, sk ISV is the server private key, and H() is the second hash function.
[0011] Optionally, in the electric power 5G edge cloud identity authentication system provided by the present invention, it also includes: calculating the fourth authentication information by the following formula: Wherein, h1() is the first hash function, N2 is the second random number, sk is the server public key Ui Power, sk Ui is the user's private key, and H() is the second hash function.
[0012] The second aspect of the present invention provides a power 5G edge cloud identity authentication method, which is applied to a terminal device. The server and the terminal device store the same multiple public user public keys and multiple public server public keys. The method includes: obtaining a server string corresponding to a server identifier of the server, and calculating the server public key according to the server string and the public server public key; calculating first authentication information according to a first random number, a user private key, and a server public key, and sending the first authentication information and the first random number to the server, so that the server authenticates the legitimacy of the terminal device according to the first authentication information and the first random number, and the user private key is calculated according to the terminal identifier of the terminal device.
[0013] The third aspect of the present invention provides a 5G edge cloud identity authentication method for electric power, which is applied to a server. The server and the terminal device store the same multiple public user public keys and multiple public server public keys. The method includes: receiving a first authentication information and a first random number sent by the terminal device; obtaining a terminal string corresponding to a terminal identification of the terminal device, and calculating a user public key according to the terminal string and the public user public key; calculating the second authentication information according to the first random number, the server private key, and the user public key. The calculation functions of the first authentication information and the second authentication information are the same, and the server private key is calculated according to the server identification of the server; if the first authentication information is the same as the second authentication information, it is determined that the terminal device is a legitimate user.
[0014] The fourth aspect of the present invention provides a computer device, comprising: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor, thereby executing the power 5G edge cloud authentication method provided in the second aspect of the present invention, or the third aspect of the present invention.
[0015] The fifth aspect of the present invention provides a computer-readable storage medium, characterized in that the computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a computer to execute the power 5G edge cloud identity authentication method provided in the second aspect of the present invention or the third aspect of the present invention.
[0016] The technical solution of the present invention has the following advantages:
[0017] In the electric power 5G edge cloud identity authentication system and method provided by the present invention, the authentication process of the terminal device and the server does not need to rely on infrastructure such as PKI, and the deployment is simple. In addition, the authentication process does not need to rely on complex bilinear mapping calculations, and the authentication process has very low computational overhead. During the authentication process, only the terminal device and the server need to interact, and there is no need to interact with the security network element. The transmission delay of the authentication process is small. In addition, in the electric power 5G edge cloud identity authentication system provided by an embodiment of the present invention, in the authentication of the terminal device and the server, the terminal device and the server do not need to obtain each other's identifications, but only need to obtain the character string corresponding to the identification, thereby protecting the privacy and security of the terminal device and the server. BRIEF DESCRIPTION OF THE DRAWINGS
[0018] In order to more clearly illustrate the specific implementation methods of the present invention or the technical solutions in the prior art, the drawings required for use in the specific implementation methods or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some implementation methods of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.
[0019] Figure 1 This is a flowchart of a specific example of the power 5G edge cloud identity authentication system in an embodiment of the present invention;
[0020] Figure 2 This is a flowchart of a specific example of the power 5G edge cloud identity authentication method in an embodiment of the present invention;
[0021] Figure 3 This is a flowchart of a specific example of the power 5G edge cloud identity authentication method in an embodiment of the present invention;
[0022] Figure 4The flowchart is a specific example of a computer device in an embodiment of the present invention. DETAILED DESCRIPTION
[0023] The technical solution of the present invention will be described clearly and completely below in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.
[0024] In the description of the present invention, it should be noted that the terms “first”, “second”, “third” and “fourth” are only used for descriptive purposes and cannot be understood as indicating or implying relative importance.
[0025] In addition, the technical features involved in the different embodiments of the present invention described below can be combined with each other as long as they do not conflict with each other.
[0026] The embodiment of the present invention provides a power 5G edge cloud identity authentication system, such as Figure 1 As shown, it includes a server and a terminal device, and the server and the terminal device store the same multiple public user public keys and multiple public server public keys.
[0027] In an optional embodiment, the server and the terminal device are connected to the background service center. When the power 5G edge cloud identity authentication system is initialized, the background service center generates a group G with an order of p and a generator of g, and then randomly generates a series of public and private keys SK AUSF = {sk UEj ,sk ISVj ,1≤j≤n}, and then generate the public keys corresponding to these public private keys The randomly generated public private key includes multiple public user private keys and multiple public server private keys. The public user private key is used to generate the user private key of the terminal device, and the public server private key is used to generate the service private key of the server. The public public key includes multiple public user public keys and public server public keys. When the terminal device and the server register with the background service center, the background service center will send all the public user public keys and public server public keys to the terminal device and the server. The public user public keys and public server public keys obtained by the terminal device and the server are the same.
[0028] The terminal device performs the following steps:
[0029] Step S11: Obtain a server character string corresponding to the server identifier of the server, and calculate a server public key according to the server character string and a public server public key.
[0030] In an optional embodiment, after the backend service center obtains the server identifier of the server, it uses a hash function to calculate the server identifier to obtain a server string corresponding to the server identifier: b1...b n =h1(UID ISV ), where h1() is the first hash function, b1,...,b n ∈{0,1}, and sends the server string to the terminal device. The terminal device can complete the authentication process without obtaining the original server identifier of the server. It can be seen that the power 5G edge cloud identity authentication system provided by the embodiment of the present invention has the characteristics of anonymous authentication, which ensures the security of the server.
[0031] Step S12: Calculate first authentication information according to the first random number, the user private key, and the server public key, and send the first authentication information and the first random number to the server. The user private key is calculated according to the terminal identification of the terminal device.
[0032] In an optional embodiment, the terminal device packages the first authentication information and the first random number into authentication request information and sends it to the server.
[0033] In an optional embodiment, the user private key is calculated by the backend service center according to the terminal identification of the terminal device when the terminal device registers with the backend service center.
[0034] In an optional embodiment, the backend service center generates a user private key through the following steps:
[0035] First calculate the terminal string according to the terminal identifier: a1...a n =h1(UID Ui ), where h1() is the first hash function, a1,...,a n ∈{0,1};
[0036] Then calculate the user private key based on the public private key and the terminal string: where a j Indicates the jth character in the terminal string, sk UEj represents the jth public user private key;
[0037] Finally, the user's private key sk is sent through a secure channel. Ui and public key PK AUSF Send to terminal device U i .
[0038] The server performs the following steps:
[0039] Step S13: Obtain a terminal character string corresponding to the terminal identification of the terminal device, and calculate a user public key according to the terminal character string and the public user public key.
[0040] In an optional embodiment, after the backend service center obtains the terminal identification of the terminal device, it uses a hash function to calculate the terminal identification to obtain a terminal string corresponding to the terminal identification: a1...a n =h1(UID Ui ), where h1() is the first hash function, a1,...,a n ∈{0,1}, and sends the terminal string to the server. The server can complete the authentication process without obtaining the original terminal identification of the terminal device. It can be seen that the power 5G edge cloud identity authentication system provided by the embodiment of the present invention has the characteristics of anonymous authentication, which ensures the security of the terminal device.
[0041] Step S14: Calculate the second authentication information according to the first random number, the server private key, and the user public key. The calculation functions of the first authentication information and the second authentication information are the same. The server private key is calculated according to the server identifier of the server.
[0042] In an optional embodiment, the server private key is calculated by the backend service center according to the server identifier of the server when the server registers with the backend server center.
[0043] In an optional embodiment, the backend service center generates a server private key through the following steps:
[0044] First calculate the server string based on the server ID: b1...b n =h1(UID ISV ), where h1() is the first hash function, b1,...,b n ∈{0,1};
[0045] Then calculate the server private key based on the public private key and the server string: where b j Indicates the jth character in the server string, sk ISVj represents the jth public server private key;
[0046] Finally, the server private key sk is sent through a secure channel ISVj and public key PK AUSF Sent to the server ISV.
[0047] Step S15: If the first authentication information is the same as the second authentication information, the server determines that the terminal device is a legitimate user.
[0048] In an optional embodiment, if the first authentication information is different from the second authentication information, the server determines that the terminal device is an illegal user.
[0049] In the electric power 5G edge cloud identity authentication system provided by the embodiment of the present invention, the authentication process of the terminal device and the server does not require the help of infrastructure such as PKI, and the deployment is simple. Moreover, the authentication process does not require the help of complex bilinear mapping calculations, and the authentication process has very low computational overhead. During the authentication process, only the terminal device and the server need to interact, and there is no need to interact with the security network element. The transmission delay of the authentication process is small. In addition, in the electric power 5G edge cloud identity authentication system provided by the embodiment of the present invention, in the authentication of the terminal device and the server, the terminal device and the server do not need to obtain each other's identifications, but only need to obtain the character string corresponding to the identification, thereby protecting the privacy and security of the terminal device and the server.
[0050] In an optional embodiment, the electric power 5G edge cloud identity authentication system provided in the embodiment of the present invention can also realize two-way authentication between the terminal device and the server, that is, the above steps S11 to S15 realize the authentication of the terminal device by the server, and the electric power 5G edge cloud identity authentication system provided in the embodiment of the present invention can also realize the authentication of the terminal device by the server, specifically including:
[0051] First, the server calculates the third authentication information according to the second random number, the user public key, and the server private key, and sends the second random number and the third authentication information to the terminal device;
[0052] Then, the terminal device calculates the fourth authentication information based on the second random number, the user private key, and the server public key. The calculation functions of the third authentication information and the fourth authentication information are the same; if the third authentication information is the same as the fourth authentication information, the terminal device determines that the server is a legitimate server.
[0053] In an optional embodiment, if the third authentication information is different from the fourth authentication information, the terminal device determines that the server is an illegal server.
[0054] The electric power 5G edge cloud identity authentication system provided by the embodiment of the present invention can also realize the terminal device's authentication of the server's legitimacy after the server authenticates the legitimacy of the terminal device, thereby realizing two-way authentication, preventing illegal terminal devices and illegal servers from impersonating identities, and further improving system security.
[0055] In an optional embodiment, in the power 5G edge cloud identity authentication system provided in the embodiment of the present invention, the server public key is calculated by the following formula:
[0056]
[0057] Where n represents the number of public server keys and / or the length of the server string. b represents the public key of the jth public server j Power, b jis the jth character in the server string;
[0058] The first authentication information is calculated by the following formula:
[0059]
[0060] Wherein, h1() is the first hash function, N1 is the first random number, sk is the server public key Ui Power, sk Ui is the user's private key, and H() is the second hash function.
[0061] In an optional embodiment, in the power 5G edge cloud identity authentication system provided in the embodiment of the present invention, the user public key is calculated by the following formula:
[0062]
[0063] Where n represents the number of public user keys and / or the length of the terminal string. a represents the jth public user's public key j Power, a j is the jth character in the terminal string;
[0064] The second authentication information is calculated by the following formula:
[0065]
[0066] Wherein, h1() is the first hash function, N1 is the first random number, sk is the user's public key ISV Power, sk ISV is the server private key, and H() is the second hash function.
[0067] In an embodiment of the present invention, and It is calculated using the Diffie-Hellman key exchange algorithm. and The values are the same, and the calculation formula of the first authentication information is the same as the calculation formula of the second authentication information. Therefore, if the terminal device and the server are both legal devices, executing the embodiment of the present invention can calculate the first authentication information and the second authentication information with the same value, thereby completing the authentication.
[0068] In an optional embodiment, in the power 5G edge cloud identity authentication system provided in the embodiment of the present invention, the third authentication information is calculated by the following formula:
[0069]
[0070] Wherein, h1() is the first hash function, N2 is the second random number, sk is the user's public key ISV Power, sk ISV is the server private key, and H() is the second hash function.
[0071] In an optional embodiment, in the power 5G edge cloud identity authentication system provided in the embodiment of the present invention, the fourth authentication information is calculated by the following formula:
[0072]
[0073] Wherein, h1() is the first hash function, N2 is the second random number, sk is the server public key Ui Power, sk Ui is the user's private key, and H() is the second hash function.
[0074] The embodiment of the present invention provides a power 5G edge cloud identity authentication method, which is applied to a terminal device, wherein the server and the terminal device store the same multiple public user public keys and multiple public server public keys, such as Figure 2 As shown, the method includes:
[0075] Step S21: Obtain a server string corresponding to the server identifier of the server, and calculate the server public key according to the server string and the public server public key. For details, see the description of step S11 in the above embodiment, which will not be repeated here.
[0076] Step S22: Calculate the first authentication information based on the first random number, the user private key, and the server public key, and send the first authentication information and the first random number to the server, so that the server authenticates the legitimacy of the terminal device based on the first authentication information and the first random number. The user private key is calculated based on the terminal identification of the terminal device. For details, please refer to the description of step S12 in the above embodiment, which will not be repeated here.
[0077] The embodiment of the present invention provides a power 5G edge cloud identity authentication method, which is applied to a server, and the server and the terminal device store the same multiple public user public keys and multiple public server public keys, such as Figure 3 As shown, the method includes:
[0078] Step S23: Receive the first authentication information and the first random number sent by the terminal device.
[0079] Step S24: obtain the terminal string corresponding to the terminal identification of the terminal device, and calculate the user public key according to the terminal string and the public user public key. For details, see the description of step S13 in the above embodiment, which will not be repeated here.
[0080] Step S25: Calculate the second authentication information based on the first random number, the server private key, and the user public key. The calculation functions of the first authentication information and the second authentication information are the same. The server private key is calculated based on the server identifier of the server. For details, please refer to the description of step S14 in the above embodiment, which will not be repeated here.
[0081] Determine whether the first authentication information is the same as the second authentication information. If the first authentication information is the same as the second authentication information, execute step S26.
[0082] Step S26: Determine whether the terminal device is a legitimate user. For details, please refer to the description of step S15 in the above embodiment, which will not be repeated here.
[0083] An embodiment of the present invention provides a computer device, such as Figure 4 As shown, the computer device mainly includes one or more processors 31 and a memory 32. Figure 4 A processor 31 is taken as an example.
[0084] The computer device may further include: an input device 33 and an output device 34 .
[0085] The processor 31, the memory 32, the input device 33 and the output device 34 may be connected via a bus or other means. Figure 4 The example of connecting through bus is taken in the following.
[0086] The processor 31 may be a central processing unit (CPU). The processor 31 may also be other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field-programmable gate arrays (FPGA) or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components, or a combination of the above chips. The general-purpose processor may be a microprocessor or the processor may be any conventional processor, etc. The memory 32 may include a program storage area and a data storage area, wherein the program storage area may store an operating system, an application required for at least one function; the data storage area may store data created according to the use of the power 5G edge cloud authentication system, etc. In addition, the memory 32 may include a high-speed random access memory, and may also include a non-transitory memory, such as at least one disk storage device, a flash memory device, or other non-transitory solid-state storage device. In some embodiments, the memory 32 may optionally include a memory remotely arranged relative to the processor 31, and these remote memories may be connected to the power 5G edge cloud authentication system via a network. The input device 33 can receive a calculation request (or other digital or character information) input by a user, and generate a key signal input related to the power 5G edge cloud identity authentication system. The output device 34 can include a display device such as a display screen to output the calculation results.
[0087] The embodiment of the present invention provides a computer-readable storage medium, which stores computer instructions, and the computer storage medium stores computer executable instructions, which can execute the power 5G edge cloud identity authentication method in any of the above method embodiments. Among them, the storage medium can be a disk, an optical disk, a read-only memory (ROM), a random access memory (RAM), a flash memory (Flash Memory), a hard disk (HDD) or a solid-state drive (SSD), etc.; the storage medium can also include a combination of the above types of memory.
[0088] Obviously, the above embodiments are merely examples for the purpose of clear explanation, and are not intended to limit the implementation methods. For those skilled in the art, other different forms of changes or modifications can be made based on the above description. It is not necessary and impossible to list all the implementation methods here. The obvious changes or modifications derived therefrom are still within the scope of protection of the invention.
Claims
1. A power 5G edge cloud identity authentication system, characterized in that: The invention comprises a server and a terminal device, wherein the server and the terminal device store the same multiple public user public keys and multiple public server public keys, The terminal device obtains a server string corresponding to the server identifier of the server, and calculates a server public key according to the server string and the public server public key; calculates first authentication information according to a first random number, a user private key, and a server public key, and sends the first authentication information and the first random number to the server, wherein the user private key is calculated according to the terminal identifier of the terminal device; The server obtains a terminal string corresponding to the terminal identification of the terminal device, and calculates a user public key according to the terminal string and the public user public key; calculates second authentication information according to a first random number, a server private key, and a user public key, wherein the calculation function of the first authentication information and the second authentication information is the same, and the server private key is calculated according to the server identification of the server; if the first authentication information is the same as the second authentication information, the server determines that the terminal device is a legitimate user; The server public key is calculated by the following formula: Where n represents the number of public server public keys, b represents the public key of the jth public server j Power, b j is the jth character in the server string; The user public key is calculated by the following formula: Where n represents the number of public user keys. a represents the jth public user's public key j Power, a j is the jth character in the terminal string.
2. The power 5G edge cloud identity authentication system according to claim 1 is characterized in that: Also includes: The server calculates third authentication information according to the second random number, the user public key, and the server private key, and sends the second random number and the third authentication information to the terminal device; The terminal device calculates the fourth authentication information based on the second random number, the user private key, and the server public key, and the calculation functions of the third authentication information and the fourth authentication information are the same; if the third authentication information is the same as the fourth authentication information, the terminal device determines that the server is a legitimate server.
3. The power 5G edge cloud identity authentication system according to claim 1 or 2, characterized in that: Also includes, The first authentication information is calculated by the following formula: Wherein, h1() is the first hash function, N1 is the first random number, sk is the server public key Ui Power, sk Ui is the user private key, and H() is the second Hash function.
4. The power 5G edge cloud identity authentication system according to claim 1 is characterized in that: Also includes, The second authentication information is calculated by the following formula: Wherein, h1() is the first hash function, N1 is the first random number, sk is the user's public key ISV Power, sk ISV is the server private key, and H() is the second hash function.
5. The power 5G edge cloud identity authentication system according to claim 2 is characterized in that: Also includes: The third authentication information is calculated by the following formula: Wherein, h1() is the first hash function, N2 is the second random number, sk is the user's public key ISV Power, sk ISV is the server private key, and H() is the second hash function.
6. The power 5G edge cloud identity authentication system according to claim 2 or 5, characterized in that: Also includes: The fourth authentication information is calculated by the following formula: Wherein, h1() is the first hash function, N2 is the second random number, sk is the server public key Ui Power, sk Ui is the user private key, and H() is the second Hash function.
7. A power 5G edge cloud identity authentication method, characterized in that: Applied to a terminal device, the server and the terminal device store the same multiple public user public keys and multiple public server public keys, and the method includes: Obtaining a server character string corresponding to the server identifier of the server, and calculating a server public key according to the server character string and the public server public key; Calculate first authentication information according to a first random number, a user private key, and a server public key, and send the first authentication information and the first random number to a server, so that the server authenticates the legitimacy of the terminal device according to the first authentication information and the first random number, and the user private key is calculated according to the terminal identification of the terminal device; The server public key is calculated by the following formula: Where n represents the number of public server public keys, b represents the public key of the jth public server j Power, b j is the jth character in the server string.
8. A power 5G edge cloud identity authentication method, characterized in that: Applied to a server, the server and the terminal device store the same multiple public user public keys and multiple public server public keys, the method comprising: Receiving first authentication information and a first random number sent by a terminal device; Obtaining a terminal character string corresponding to a terminal identification of the terminal device, and calculating a user public key according to the terminal character string and the public user public key; Calculate the second authentication information according to the first random number, the server private key, and the user public key, wherein the calculation function of the first authentication information and the second authentication information is the same, and the server private key is calculated according to the server identifier of the server; If the first authentication information is the same as the second authentication information, determining that the terminal device is a legitimate user; The user public key is calculated by the following formula: Where n represents the number of public user keys. a represents the jth public user's public key j Power, a j is the jth character in the terminal string.
9. A computer device, characterized in that: include: at least one processor; And a memory communicatively connected to the at least one processor; wherein the memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor to execute the power 5G edge cloud authentication method as described in claim 7 or 8.
10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer instructions, and the computer instructions are used to enable the computer to execute the power 5G edge cloud authentication method as described in claim 7 or 8.
Citation Information
Patent Citations
Public key and private key generation method and device, equipment and medium
CN110708167A
Intelligent electric meter lightweight authentication method and system in edge computing scene
CN111147472A