一种基于WebAuthn协议的国密算法身份认证系统、方法和装置

By using a national cryptographic algorithm-based identity authentication system based on the WebAuthn protocol, combined with USB hardware devices and a PKI trust system, the system solves the problems of easy leakage in traditional identity authentication and the difficulty in popularizing national cryptographic chips. It achieves cross-platform, secure identity authentication and improves the compatibility and security of national cryptographic algorithms.

CN115987598BActive Publication Date: 2026-07-17TRUSTASIA TECH INC

Patent Information

Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
TRUSTASIA TECH INC
Filing Date
2022-12-16
Publication Date
2026-07-17

AI Technical Summary

Technical Problem

In existing technologies, traditional identity authentication methods are easily leaked and cracked, and cannot be used across platforms and operating systems. The widespread adoption of national cryptographic algorithm security chips is difficult, and traditional WebAuthn lacks strong identity authentication capabilities and lifecycle management.

Method used

The identity authentication system based on the WebAuthn protocol and national cryptographic algorithms includes an authentication SDK, terminal devices, authentication devices, user master keys, and a PKI identity certificate management system. It generates and stores private keys through USB hardware devices, combines SM2 algorithm and SM4-ECB encryption to achieve cross-platform authentication, and uses short-cycle identity certificates and PKI trust system for identity verification.

Benefits of technology

It achieves secure identity authentication across platforms and operating systems, reduces the risk of private key leakage, simplifies the popularization of national cryptographic algorithms, improves the security and convenience of identity authentication, supports international standards and domestic algorithms, and prevents man-in-the-middle attacks.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN115987598B_ABST
    Figure CN115987598B_ABST
Patent Text Reader

Abstract

本发明公开了一种基于WebAuthn协议的国密算法身份认证系统、方法及装置,属于身份认证安全领域;系统包括认证SDK、PKI身份证书管理系统、认证装置、用户主密钥和终端设备;认证方法包括:用户主密钥为认证装置颁发含APPID数据的、合法的短周期身份证书,终端设备向认证SDK发起身份认证请求,认证SDK生成并返回盘问口令,认证装置内的私钥对盘问口令进行数字签名,同时将签名数据和短周期临时身份证书返回给认证SDK;认证SDK验证用户身份认证信息,认证装置为一内置安全芯片的USB装置。本发明能有效阻止身份认证账户密码泄露及被第三方窃取,有效保证身份认证流程的安全性,安全和方便的拓展可信身份在各种终端设备中的使用,尤其是在标准的Web客户端中使用。
Need to check novelty before this filing date? Find Prior Art