Message authentication method, device and equipment and readable storage medium

Abstract

The invention provides a message authentication method, device and equipment and a readable storage medium, and the method comprises the steps: transmitting a verification personal identification code (PIN) to a user identification module after obtaining a 5G service message; obtaining a PIN code verification result sent by the user identification module, wherein the PIN code verification result is a result obtained after the verification of the verification PIN code; under the condition that the PIN code verification result shows that the verification PIN code is successfully verified, a signature result of summary information of the 5G service message is obtained, the signature result is generated according to a private key in an authentication key pair, and the authentication key pair is generated by the user identification module; and verifying the signature result according to a public key in the authentication key pair to obtain a verification result.

Description

Technical Field

[0001] The present application relates to the field of wireless technology, and in particular to a message authentication method, apparatus, device and readable storage medium. Background Art

[0002] In the related technologies, 5G messages are native applications for mobile terminals. Currently, the General Bootstrapping Architecture (GBA) is used to confirm the identity of users, and is applied in business scenarios such as uploading and downloading terminal multimedia content, discovering chatbots, and querying chatbot details. This process is an automated authentication process. After the authentication is passed, users can use the 5G message service normally. However, in the existing solution, users can complete the automated authentication process for the 5G message service by holding a terminal and a Subscriber Identity Module (SIM) card, and can use 5G messages to handle services without any threshold, and the security authentication level is low. Summary of the invention

[0003] The purpose of this application is to provide a message authentication method, device, equipment and readable storage medium to solve the problem of low security authentication level of 5G message services in related technologies.

[0004] To achieve the above object, an embodiment of the present application provides a message authentication method, which is executed by a 5G message software development kit SDK module, and the method includes:

[0005] After receiving the 5G service message, send the verification personal identification code PIN to the user identification module;

[0006] Obtaining a PIN code verification result sent by the user identification module, wherein the PIN code verification result is a result of verifying the verification PIN code;

[0007] When the PIN code verification result indicates that the verification of the verification PIN code is successful, obtaining a signature result of the summary information of the 5G service message, where the signature result is generated based on a private key in an authentication key pair, and the authentication key pair is generated by the user identification module;

[0008] The signature result is verified according to the public key in the authentication key pair to obtain a verification result.

[0009] Optionally, before obtaining the signature result of the summary information of the 5G service message, the method further includes:

[0010] Generate summary information of 5G service messages;

[0011] The summary information is sent to the user identification module.

[0012] Optionally, the method of the embodiment of the present application further includes:

[0013] Acquire the public key in the authentication key pair sent by the user identification module.

[0014] Optionally, the method of the embodiment of the present application further includes:

[0015] An initial PIN code is sent to the user identification module, where the initial PIN code is used to verify the verification PIN code.

[0016] The embodiment of the present application also provides a message authentication method, which is performed by a user identification module, and the method includes:

[0017] Get verification personal identification number PIN;

[0018] Sending a PIN code verification result to the 5G message SDK module, where the PIN code verification result is a result of verifying the verification PIN code;

[0019] Upon receiving summary information of the 5G service message sent by the 5G message SDK module, generating a signature result of the summary information according to the private key in the authentication key pair;

[0020] Send the signature result to the 5G message SDK module.

[0021] Optionally, the method of the embodiment of the present application further includes:

[0022] The verification PIN code is verified according to the stored initial PIN code to obtain the PIN code verification result.

[0023] Optionally, the method of the embodiment of the present application further includes:

[0024] The public key in the authentication key pair is sent to the 5G message SDK module, and the public key is used by the 5G message SDK module to verify the signature result.

[0025] The embodiment of the present application also provides a message authentication device, including:

[0026] The first sending module is used to send a verification personal identification code PIN code to the user identification module after obtaining the 5G service message;

[0027] A first receiving module is used to obtain a PIN code verification result sent by the user identification module, where the PIN code verification result is a result of verifying the verification PIN code;

[0028] A second receiving module is used to obtain a signature result of the summary information of the 5G service message when the PIN code verification result indicates that the verification PIN code verification is successful, wherein the signature result is generated according to a private key in an authentication key pair, and the authentication key pair is generated by the user identification module;

[0029] The first processing module is used to verify the signature result according to the public key in the authentication key pair to obtain a verification result.

[0030] Optionally, the device of the embodiment of the present application further includes:

[0031] The second processing module is used to generate summary information of the 5G service message;

[0032] The second sending module is used to send the summary information to the user identification module.

[0033] Optionally, the device of the embodiment of the present application further includes:

[0034] The third receiving module is used to obtain the public key in the authentication key pair sent by the user identification module.

[0035] Optionally, the device of the embodiment of the present application further includes:

[0036] The third sending module is used to send an initial PIN code to the user identification module, and the initial PIN code is used to verify the verification PIN code.

[0037] The embodiment of the present application also provides a message authentication device, including:

[0038] The third receiving module is used to obtain a verification personal identification code PIN code;

[0039] A fourth sending module is used to send a PIN code verification result to the 5G message SDK module, where the PIN code verification result is a result of verifying the verification PIN code;

[0040] The third processing module is used to generate a signature result of the summary information according to the private key in the authentication key pair when receiving the summary information of the 5G service message sent by the 5G message SDK module;

[0041] The fifth sending module is used to send the signature result to the 5G message SDK module.

[0042] An embodiment of the present application also provides a message authentication device, including: a transceiver, a processor, a memory, and a program or instruction stored in the memory and executable on the processor; when the processor executes the program or instruction, the steps in the message authentication method described above are implemented.

[0043] An embodiment of the present application also provides a readable storage medium on which a program or instruction is stored. When the program or instruction is executed by a processor, the steps in the message authentication method described above are implemented.

[0044] An embodiment of the present application also provides a computer program product, including computer instructions, which implement the steps in the message authentication method described above when executed by a processor.

[0045] The beneficial effects of the above technical solution of the present application are as follows:

[0046] In an embodiment of the present application, a verification PIN code is transmitted between the 5G message SDK module and the user identification module, and after the verification PIN code is verified, the signature result of the summary information is verified based on the authentication key pair of the user identification module. That is, in the scheme of the present application, double verification of the verification PIN code and the signature result of the summary information is performed when using the 5G message service, thereby effectively improving the security authentication level of the 5G message service. BRIEF DESCRIPTION OF THE DRAWINGS

[0047] Figure 1 A schematic diagram of a flow chart of a message authentication method in some embodiments of the present application;

[0048] Figure 2 This is a schematic diagram of the architecture of a message authentication method in some embodiments of the present application;

[0049] Figure 3 A schematic diagram of a flow chart of a message authentication method in some embodiments of the present application;

[0050] Figure 4 This is an interactive schematic diagram of a message authentication method in some embodiments of the present application;

[0051] Figure 5 This is a module diagram of a message authentication device in some embodiments of the present application;

[0052] Figure 6 This is a module diagram of a message authentication device in some embodiments of the present application;

[0053] Figure 7 This is a structural block diagram of a message authentication device in some embodiments of the present application. DETAILED DESCRIPTION

[0054] In order to make the technical problems, technical solutions and advantages to be solved by the present application clearer, a detailed description will be given below with reference to the accompanying drawings and specific embodiments.

[0055] It should be understood that the references to "one embodiment" or "an embodiment" throughout the specification mean that the specific features, structures, or characteristics associated with the embodiment are included in at least one embodiment of the present application. Therefore, the references to "in one embodiment" or "in an embodiment" appearing throughout the specification do not necessarily refer to the same embodiment. In addition, these specific features, structures, or characteristics may be combined in any suitable manner in one or more embodiments.

[0056] The terms "first", "second", etc. in the specification and claims of the present application are used to distinguish similar objects, and are not used to describe a specific order or sequence. It should be understood that the terms used in this way are interchangeable where appropriate, so that the embodiments of the present application can be implemented in an order other than those illustrated or described herein, and the objects distinguished by "first" and "second" are generally of one type, and the number of objects is not limited, for example, the first object can be one or more. In addition, "and / or" in the specification and claims represents at least one of the connected objects, for example, the protection scope of "A and / or B" covers at least three schemes, namely, Scheme 1: including A and excluding B; Scheme 2: including B and excluding A; Scheme 3: including both A and B. The character " / " generally indicates that the objects associated before and after are in an "or" relationship.

[0057] In the various embodiments of the present application, it should be understood that the size of the serial numbers of the following processes does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present application.

[0058] Additionally, the terms "system" and "network" are often used interchangeably herein.

[0059] In the embodiments provided in the present application, it should be understood that "B corresponding to A" means that B is associated with A, and B can be determined according to A. However, it should also be understood that determining B according to A does not mean determining B only according to A, and B can also be determined according to A and / or other information.

[0060] like Figure 1 As shown, an embodiment of the present application provides a message authentication method, which is executed by a 5G message software development kit (Software Development Kit, SDK) module, and the method includes:

[0061] Step 101: After obtaining the 5G service message, send a verification personal identification number (PIN) code to the user identification module.

[0062] In the embodiment of the present application, the 5G message SDK module is used to provide users with 5G message business services, such as Figure 2 As shown, the 5G message SDK module is connected to the authentication applet in the user identification module through the IF1 interface, the 5G message SDK module is connected to the Massage as a platform (MaaP) platform through the IF2 interface, and the MaaP platform is connected to the business platform through the IF3 interface.

[0063] Among them, the user identification module can also be described as a SIM card. The above-mentioned MaaP platform is used to provide Chatbot access, control, and docking services with the 5G message system. The above-mentioned authentication Applet is a card application used to provide authentication services. The above-mentioned business platform is used to dock with the MaaP platform to provide business services to end users in the form of a Chatbot chat robot.

[0064] In this step 101, the 5G message SDK module obtains the 5G service message sent by the MaaP platform. The 5G service message is sent by the MaaP platform to the 5G message SDK module after receiving the service message sent by the service platform.

[0065] Step 102: Obtain the PIN code verification result sent by the user identification module, where the PIN code verification result is a result of verifying the verification PIN code.

[0066] Optionally, the PIN code verification result is obtained by the user identification module verifying the verification PIN code based on the initial PIN code.

[0067] In an embodiment of the present application, if the message authentication method of the present application is activated for the first time, the 5G message SDK module sends the above-mentioned initial PIN code to the user identification module.

[0068] Step 103: When the PIN code verification result indicates that the verification of the PIN code is successful, obtain the signature result of the summary information of the 5G service message, where the signature result is generated based on the private key in the authentication key pair, and the authentication key pair is generated by the user identification module.

[0069] Optionally, obtain the signature result of the summary information of the 5G service message sent by the user identification module.

[0070] Optionally, the above authentication key pair is generated by a user identification module when the message authentication method of the present application is activated for the first time, and the authentication key pair includes a public key PK1 and a private key SK1.

[0071] Step 103: Verify the signature result according to the public key in the authentication key pair to obtain a verification result.

[0072] If the verification result shows that the above signature result passes the verification, the 5G message SDK module sends the user's confirmation message for the 5G service message to the MaaP platform, and the MaaP platform returns it to the service platform.

[0073] In an embodiment of the present application, a verification PIN code is transmitted between the 5G message SDK module and the user identification module, and after the verification PIN code is verified, the signature result of the summary information is verified based on the authentication key pair of the user identification module. That is, in the scheme of the present application, double verification of the verification PIN code and the signature result of the summary information is performed when using the 5G message service, thereby effectively improving the security authentication level of the 5G message service.

[0074] Optionally, before obtaining the signature result of the summary information of the 5G service message, the method further includes:

[0075] Generate summary information of 5G service messages;

[0076] The summary information is sent to the user identification module.

[0077] In an embodiment of the present application, when the PIN code verification result indicates that the verification of the PIN code is successful, summary information of the 5G service message is generated, and the summary information is sent to the user identification module, so as to verify the signature result of the summary information based on the authentication key pair of the user identification module.

[0078] Optionally, the method of the embodiment of the present application further includes:

[0079] Acquire the public key in the authentication key pair sent by the user identification module.

[0080] Here, the user identification module transmits the public key to the 5G message SDK module so that the 5G message SDK module verifies the signature result of the summary information based on the public key pair.

[0081] Optionally, the method of the embodiment of the present application further includes:

[0082] An initial PIN code is sent to the user identification module, where the initial PIN code is used to verify the verification PIN code.

[0083] In an embodiment of the present application, if the message authentication method of the present application is activated for the first time, the 5G message SDK module sends the above-mentioned initial PIN code to the user identification module, and the user identification module saves the initial PIN code to facilitate subsequent verification of the verification PIN code based on the initial PIN code.

[0084] In an embodiment of the present application, a verification PIN code is transmitted between the 5G message SDK module and the user identification module, and after the verification PIN code is verified, the signature result of the summary information is verified based on the authentication key pair of the user identification module. That is, in the scheme of the present application, double verification of the verification PIN code and the signature result of the summary information is performed when using the 5G message service, thereby effectively improving the security authentication level of the 5G message service.

[0085] like Figure 3 As shown, the embodiment of the present application also provides a message authentication method, which is performed by a user identification module, and the user identification module can also be described as a SIM card. The method includes:

[0086] Step 301: Obtain a verification personal identification code PIN code.

[0087] Optionally, step 301 includes obtaining a verification PIN code sent by the 5G message SDK module.

[0088] The verification PIN code is sent after the 5G message SDK module obtains the 5G service message sent by the MaaP platform.

[0089] Step 302: Send the PIN code verification result to the 5G message SDK module, where the PIN code verification result is the result of verifying the verification PIN code.

[0090] In the embodiment of the present application, after receiving the verification PIN code, the user identification module compares the verification PIN code with the initial PIN code to obtain a PIN code verification result.

[0091] When the verification PIN code is consistent with the initial PIN code, the PIN code verification result is that the verification PIN code verification is successful, and when the verification PIN code is inconsistent with the initial PIN code, the PIN code verification result is that the verification PIN code verification fails.

[0092] Step 303: When the summary information of the 5G service message sent by the 5G message SDK module is received, a signature result of the summary information is generated according to the private key in the authentication key pair.

[0093] In an embodiment of the present application, when the PIN code verification result indicates that the verification PIN code is successful, the 5G message SDK module generates summary information of the 5G service message and sends the summary information to the user identification module. The user identification module generates a signature result of the summary information based on the summary information and the above-mentioned private key.

[0094] Step 304: Send the signature result to the 5G message SDK module.

[0095] Here, the user identification module sends the signature result to the 5G message SDK module so that the 5G message SDK module verifies the signature result based on the public key in the authentication key pair.

[0096] In the embodiment of the present application, a verification personal identification code PIN code is obtained; a PIN code verification result is sent to the 5G message SDK module, and the PIN code verification result is the result of verifying the verification PIN code; when the summary information of the 5G service message sent by the 5G message SDK module is received, a signature result of the summary information is generated according to the private key in the authentication key pair; the signature result is sent to the 5G message SDK module, so that the 5G message SDK module verifies the signature result according to the public key in the authentication key pair. In the solution of the present application, double verification of the verification PIN code and the signature result of the summary information is performed when using the 5G message service, thereby effectively improving the security authentication level of the 5G message service.

[0097] Optionally, the method of the embodiment of the present application further includes:

[0098] The verification PIN code is verified according to the stored initial PIN code to obtain the PIN code verification result.

[0099] The method of the embodiment of the present application also includes:

[0100] Get the initial PIN code sent by the 5G message SDK module.

[0101] In an embodiment of the present application, if the message authentication method of the present application is activated for the first time, the 5G message SDK module sends the above-mentioned initial PIN code to the user identification module, and the user identification module saves the initial PIN code to facilitate subsequent verification of the verification PIN code based on the initial PIN code.

[0102] Optionally, the method of the embodiment of the present application further includes:

[0103] The public key in the authentication key pair is sent to the 5G message SDK module, and the public key is used by the 5G message SDK module to verify the signature result.

[0104] Here, the user identification module transmits the public key to the 5G message SDK module so that the 5G message SDK module verifies the signature result of the summary information based on the public key pair.

[0105] In the embodiment of the present application, a verification personal identification code PIN code is obtained; a PIN code verification result is sent to the 5G message SDK module, and the PIN code verification result is the result of verifying the verification PIN code; when the summary information of the 5G service message sent by the 5G message SDK module is received, a signature result of the summary information is generated according to the private key in the authentication key pair; the signature result is sent to the 5G message SDK module, so that the 5G message SDK module verifies the signature result according to the public key in the authentication key pair. In the solution of the present application, double verification of the verification PIN code and the signature result of the summary information is performed when using the 5G message service, thereby effectively improving the security authentication level of the 5G message service.

[0106] Combine the following Figure 4 The interactive process of the message authentication method in the embodiment of the present application is explained.

[0107] like Figure 4 As shown, the interaction process includes:

[0108] Step 1: The business platform sends a business message to the MaaP platform.

[0109] Step 2: The MaaP platform sends 5G service messages to the 5G message SDK module.

[0110] Step 3: The user opens the 5G message to confirm the message content. The 5G message SDK module determines to use the SIM signature and enters the verification PIN code. If it is the first time to use it, you need to enter the initial PIN code first, and then enter the verification PIN code.

[0111] Step 4: The 5G message SDK module transmits the initial PIN code (optional) and verifies the PIN code to the SIM card.

[0112] It should be noted that the above initial PIN code is only transmitted to the SIM card when the message authentication method of the present application is activated for the first time.

[0113] Step 5: If the message authentication method of the present application is activated for the first time, the SIM card generates an authentication key pair (PK1, SK1), stores an initial PIN code, and compares the verification PIN code with the initial PIN code.

[0114] Step 6: The SIM card returns the PK1 (needed to be transmitted for the first activation) and PIN code verification results to the 5G message SDK module.

[0115] Step 7: The 5G message SDK module stores PK1 (if it is used for the first time); if the PIN code verification is successful, the summary information of the message content after user confirmation is calculated.

[0116] Step 8: The 5G message SDK module passes the summary information to the SIM card.

[0117] Step 9: The SIM card uses SK1 to calculate the signature result M for the summary information.

[0118] Step 10: Return the signature result M to the 5G message SDK module.

[0119] Step 11: The 5G message SDK module uses PK1 to verify the M signature.

[0120] Step 12: If the signature verification is successful, the user confirmation message result is returned to the MaaP platform.

[0121] The above-mentioned user confirmation message may refer to the user's confirmation message for the 5G service message.

[0122] Step 13: The MaaP platform returns the user confirmation message result to the business platform.

[0123] In the solution of this application, the 5G message SDK module is connected to the SIM card interface, and the local trusted authentication of 5G messages can be completed through the SIM two-factor authentication method, thereby effectively improving the security authentication level of the 5G message service.

[0124] like Figure 5 As shown, the embodiment of the present application also provides a message authentication device, including:

[0125] The first sending module 501 is used to send a verification personal identification code PIN code to the user identification module after obtaining the 5G service message;

[0126] A first receiving module 502 is used to obtain a PIN code verification result sent by the user identification module, where the PIN code verification result is a result of verifying the verification PIN code;

[0127] The second receiving module 503 is used to obtain the signature result of the summary information of the 5G service message when the PIN code verification result indicates that the verification PIN code verification is successful, where the signature result is generated according to the private key in the authentication key pair, and the authentication key pair is generated by the user identification module;

[0128] The first processing module 504 is used to verify the signature result according to the public key in the authentication key pair to obtain a verification result.

[0129] Optionally, the device of the embodiment of the present application further includes:

[0130] The second processing module is used to generate summary information of the 5G service message;

[0131] The second sending module is used to send the summary information to the user identification module.

[0132] Optionally, the device of the embodiment of the present application further includes:

[0133] The third receiving module is used to obtain the public key in the authentication key pair sent by the user identification module.

[0134] Optionally, the device of the embodiment of the present application further includes:

[0135] The third sending module is used to send an initial PIN code to the user identification module, and the initial PIN code is used to verify the verification PIN code.

[0136] It should be noted that the device is a device corresponding to the method embodiment executed by the above-mentioned 5G message SDK module. All implementation methods of the above-mentioned method embodiment can be applied to the device embodiment and can achieve the same technical effect, which will not be repeated here.

[0137] like Figure 6 As shown, the embodiment of the present application also provides a message authentication device, including:

[0138] The third receiving module 601 is used to obtain a verification personal identification code PIN code;

[0139] The fourth sending module 602 is used to send a PIN code verification result to the 5G message SDK module, where the PIN code verification result is a result of verifying the verification PIN code;

[0140] The third processing module 603 is used to generate a signature result of the summary information according to the private key in the authentication key pair when receiving the summary information of the 5G service message sent by the 5G message SDK module;

[0141] The fifth sending module 604 is used to send the signature result to the 5G message SDK module.

[0142] Optionally, the device of the embodiment of the present application further includes:

[0143] The fourth processing module is used to verify the verification PIN code according to the stored initial PIN code to obtain the PIN code verification result.

[0144] Optionally, the device of the embodiment of the present application further includes:

[0145] The sixth sending module is used to send the public key in the authentication key pair to the 5G message SDK module, and the public key is used by the 5G message SDK module to verify the signature result.

[0146] It should be noted that the device is a device corresponding to the method embodiment executed by the above-mentioned user identification module. All implementation methods of the above-mentioned method embodiment can be applied to the device embodiment and can achieve the same technical effect, which will not be repeated here.

[0147] The present application embodiment provides a message authentication device, such as Figure 7 As shown, it includes a transceiver 710, a processor 700, a memory 720, and a program or instruction stored in the memory 720 and executable on the processor 700; when the processor 700 executes the program or instruction, the steps of the above-mentioned message authentication method are implemented. The message authentication device may be a 5G message SDK module or a SIM card or an electronic device. The electronic device may be a terminal or a computer device or a user device, etc.

[0148] The transceiver 710 is used to receive and send data under the control of the processor 700.

[0149] Among them, Figure 7 In the embodiment, the bus architecture may include any number of interconnected buses and bridges, specifically one or more processors represented by processor 700 and various circuits of memory represented by memory 720 are linked together. The bus architecture may also link together various other circuits such as peripherals, voltage regulators, and power management circuits, which are well known in the art and are therefore not further described herein. The bus interface provides an interface. The transceiver 710 may be a plurality of components, namely, a transmitter and a receiver, providing a unit for communicating with various other devices on a transmission medium. For different user devices, the user interface 730 may also be an interface capable of externally and internally connecting required devices, and the connected devices include but are not limited to a keypad, a display, a speaker, a microphone, a joystick, and the like.

[0150] The processor 700 is responsible for managing the bus architecture and general processing, and the memory 720 can store data used by the processor 700 when performing operations.

[0151] An embodiment of the present application provides an electronic device, including a 5G message SDK module and a SIM card. The 5G message SDK module can implement the steps of the message authentication method performed by the 5G message SDK module as described above, and the SIM card can implement the steps of the message authentication method performed by the user identification module as described above.

[0152] An embodiment of the present application also provides a readable storage medium on which a program or instruction is stored. When the program or instruction is executed by a processor, the steps in the message authentication method described above are implemented and the same technical effect can be achieved. To avoid repetition, it will not be repeated here.

[0153] The embodiment of the present application also provides a computer program product, including computer instructions. When the computer instructions are executed by a processor, the various processes of the embodiment of the above-mentioned message authentication method are implemented, and the same technical effect can be achieved. To avoid repetition, they are not repeated here.

[0154] The processor is the processor in the message authentication device described in the above embodiment. The readable storage medium includes a computer readable storage medium, such as a computer read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk.

[0155] It should be further explained that the terminals described in this specification include but are not limited to smart phones, tablet computers, etc., and many of the functional components described are called modules in order to more particularly emphasize the independence of their implementation methods.

[0156] In the embodiment of the present application, module can be implemented with software so that it can be executed by various types of processors. For example, an executable code module of an identification can include one or more physical or logical blocks of computer instructions, for example, it can be constructed as an object, process or function. Nevertheless, the executable code of the identified module does not need to be physically located together, but can include different instructions stored in different positions, and when these instructions are logically combined together, it constitutes a module and realizes the specified purpose of the module.

[0157] In fact, executable code module can be a single instruction or many instructions, and can even be distributed on a plurality of different code segments, distributed among different programs, and distributed across a plurality of memory devices. Similarly, operating data can be identified in the module, and can be implemented and organized in the data structure of any appropriate type according to any appropriate form. The operating data can be collected as a single data set, or can be distributed in different locations (including on different storage devices), and can only be present on a system or network as an electronic signal at least in part.

[0158] When a module can be implemented by software, considering the level of existing hardware technology, a person skilled in the art can build a corresponding hardware circuit to implement the corresponding function of the module that can be implemented by software without considering the cost. The hardware circuit includes a conventional very large scale integration (VLSI) circuit or gate array and existing semiconductors such as logic chips, transistors, or other discrete components. The module can also be implemented by a programmable hardware device, such as a field programmable gate array, a programmable array logic, a programmable logic device, etc.

[0159] The above exemplary embodiments are described with reference to the accompanying drawings, and many different forms and embodiments are feasible without departing from the spirit and teachings of the present application. Therefore, the present application should not be constructed as a limitation of the exemplary embodiments proposed herein. More specifically, these exemplary embodiments are provided so that the present application will be perfect and complete, and the scope of the present application will be conveyed to those who are familiar with the technology. In these figures, the component sizes and relative sizes may be exaggerated for clarity. The terms used here are only based on the purpose of describing specific exemplary embodiments and are not intended to be limiting. As used herein, unless the text clearly indicates otherwise, the singular forms "one", "an" and "the" are intended to include these multiple forms. It will be further understood that the terms "comprising" and / or "including" when used in this specification indicate the presence of the features, integers, steps, operations, components and / or components, but do not exclude the presence or increase of one or more other features, integers, steps, operations, components, components and / or their groups. Unless otherwise indicated, when stated, a range of values ​​includes the upper and lower limits of that range and any subranges therebetween.

[0160] The above is a preferred embodiment of the present application. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principles described in the present application. These improvements and modifications should also be regarded as the scope of protection of the present application.

Claims

1. A message authentication method, executed by a 5G message software development kit SDK module, characterized in that: The method comprises: After receiving the 5G service message, send the verification personal identification code PIN to the user identification module; Obtaining a PIN code verification result sent by the user identification module, wherein the PIN code verification result is a result of verifying the verification PIN code; When the PIN code verification result indicates that the verification of the verification PIN code is successful, obtaining a signature result of the summary information of the 5G service message, where the signature result is generated based on a private key in an authentication key pair, and the authentication key pair is generated by the user identification module; The signature result is verified according to the public key in the authentication key pair to obtain a verification result.

2. The method according to claim 1, characterized in that Before obtaining the signature result of the summary information of the 5G service message, it also includes: Generate summary information of 5G service messages; The summary information is sent to the user identification module.

3. The method according to claim 1, characterized in that Also includes: Acquire the public key in the authentication key pair sent by the user identification module.

4. The method according to claim 1, characterized in that: Also includes: An initial PIN code is sent to the user identification module, where the initial PIN code is used to verify the verification PIN code.

5. A message authentication method, performed by a user identification module, characterized in that: The method comprises: Get verification personal identification number PIN; Send the PIN code verification result to the 5G message SDK module, where the PIN code verification result is the result of verifying the verification PIN code; Upon receiving summary information of the 5G service message sent by the 5G message SDK module, generating a signature result of the summary information according to the private key in the authentication key pair; Send the signature result to the 5G message SDK module.

6. The method according to claim 5, characterized in that Also includes: The verification PIN code is verified according to the stored initial PIN code to obtain the PIN code verification result.

7. The method according to claim 5, characterized in that Also includes: The public key in the authentication key pair is sent to the 5G message SDK module, and the public key is used by the 5G message SDK module to verify the signature result.

8. A message authentication device, characterized in that: include: The first sending module is used to send a verification personal identification code PIN code to the user identification module after obtaining the 5G service message; A first receiving module is used to obtain a PIN code verification result sent by the user identification module, wherein the PIN code verification result is a result of verifying the verification PIN code; A second receiving module is used to obtain a signature result of the summary information of the 5G service message when the PIN code verification result indicates that the verification PIN code verification is successful, wherein the signature result is generated according to a private key in an authentication key pair, and the authentication key pair is generated by the user identification module; The first processing module is used to verify the signature result according to the public key in the authentication key pair to obtain a verification result.

9. The device according to claim 8, characterized in that Also includes: The second processing module is used to generate summary information of the 5G service message; The second sending module is used to send the summary information to the user identification module.

10. The device according to claim 8, characterized in that Also includes: The third receiving module is used to obtain the public key in the authentication key pair sent by the user identification module.

11. The device according to claim 8, characterized in that Also includes: The third sending module is used to send an initial PIN code to the user identification module, and the initial PIN code is used to verify the verification PIN code.

12. A message authentication device, characterized in that: include: The third receiving module is used to obtain a verification personal identification code PIN code; A fourth sending module is used to send a PIN code verification result to the 5G message SDK module, where the PIN code verification result is a result of verifying the verification PIN code; The third processing module is used to generate a signature result of the summary information according to the private key in the authentication key pair when receiving the summary information of the 5G service message sent by the 5G message SDK module; The fifth sending module is used to send the signature result to the 5G message SDK module.

13. A message authentication device, comprising: A transceiver, a processor, a memory, and a program or instruction stored in the memory and executable on the processor; characterized in that when the processor executes the program or instruction, it implements the steps in the message authentication method as described in any one of claims 1 to 4, or implements the steps in the message authentication method as described in any one of claims 5 to 7.

14. A readable storage medium having a program or instruction stored thereon, characterized in that: When the program or instruction is executed by the processor, the steps of the message authentication method as described in any one of claims 1 to 4 are implemented, or the steps of the message authentication method as described in any one of claims 5 to 7 are implemented.

15. A computer program product, characterized in that The method comprises computer instructions, which, when executed by a processor, implement the steps in the message authentication method as described in any one of claims 1 to 4, or implement the steps in the message authentication method as described in any one of claims 5 to 7.

Images