Intelligent control system of a shot blasting machine

Abstract

The application relates to the technical field of intelligent control of shot blasting machines, and discloses an intelligent control system of a shot blasting machine, wherein a PLC controller in a PLC-based shot blasting machine control system exchanges data with an upper computer through Ethernet, and the upper computer realizes remote control of the shot blasting machine; a mobile terminal device accesses the upper computer through a security authentication server, the upper computer exchanges data with the mobile terminal device through an HTTP protocol, and transmits a user's control instruction to the upper computer through a shot blasting machine control application program. The application provides a technical scheme for security and trusted authentication of the identity of a user who sends a shot blasting machine control instruction through a mobile terminal device; the scheme applies the principle of a certificateless public key cryptography system to an industrial Internet of Things environment, guarantees the security of an industrial Internet of Things application service end (the upper computer), and significantly improves the calculation efficiency in the process of executing a security and trusted authentication program.

Description

Technical Field

[0001] This invention relates to the field of intelligent control technology for shot blasting machines, specifically to an intelligent control system for shot blasting machines. Background Technology

[0002] In modern industrial production, the assembly manufacturing industry often uses a large number of forgings, castings and welded parts. In the early stages of production, these parts have poor surface quality, often with a lot of residual molding sand and oxide scale, and there is also a large amount of residual stress on the surface of the parts.

[0003] Currently, shot blasting, a highly automated process, is widely used for this treatment. Shot blasting is a method that uses a shot blaster to propel shot of a specific size at high speed toward the workpiece. This process effectively removes rust, molding sand, and oxide scale from the workpiece surface, improving not only the surface finish but also the compressive stress and fatigue resistance.

[0004] A hook-type shot blasting machine is a hook-type workpiece cleaning equipment, consisting of a cleaning cabinet, lifting motor, separator, conveyor belt, two shot blasting controllers, shot blasting control chamber, hook system, dust removal, and electrical control components. When the shot blasting machine starts working, after the dust removal motor, lifting machine, and screw conveyor are ready, the equipment begins normal operation. First, the electric hoist lowers and lifts the casting to be processed, which is then raised to a fixed position by the lifting motor. The casting is then conveyed along the track into the shot blasting chamber. When the casting reaches the preset position, it stops, and the hook's self-rotating motor is started. At this time, the shot blasting chamber door is closed, the shot blaster is started, the shot gate is opened, and shot blasting cleaning and strengthening of the workpiece begins. This process is repeated until cleaning is complete, and finally, the machine is stopped in sequence.

[0005] The working environment of shot blasting machines is relatively harsh. Using remote intelligent control can avoid the impact of the environment on the human body and microcomputer equipment during the production process. Summary of the Invention

[0006] For hook-type shot blasting machines, this invention provides an intelligent control system. The mobile terminal device transmits the user's control commands to the host computer, which exchanges data with the PLC controller via Ethernet. The host computer can remotely control the shot blasting machine's start-up, operation, shot blasting, alarm, and dust removal processes.

[0007] An intelligent control system for a shot blasting machine includes: a PLC-based shot blasting machine control system, a host computer running a shot blasting machine control service program, a mobile terminal device running a shot blasting machine control application program, and a security authentication server.

[0008] In a PLC-based shot blasting machine control system, the PLC is used to control the start-up, operation, shot blasting, alarm, and dust removal processes of the shot blasting machine.

[0009] In the PLC-based shot blasting machine control system, the PLC controller exchanges data with the host computer via Ethernet, enabling remote control of the shot blasting machine from the host computer.

[0010] The mobile terminal device connects to the host computer through a security authentication server. The host computer exchanges data with the mobile terminal device via the HTTP protocol and transmits the user's control commands to the host computer through the shot blasting machine control application.

[0011] Preferably, the security authentication server is used to perform secure and reliable authentication of the user's identity when issuing shot blasting machine control commands through a mobile terminal device.

[0012] Preferably, the method for the security authentication server to perform secure and reliable authentication of the user's identity when issuing shot blasting machine control commands through a mobile terminal device is as follows:

[0013] Generate identity information for the host computer, the security authentication server, and the user who issues shot blasting machine control commands through mobile terminal devices;

[0014] Generate secure communication permissions for the host computer, the security authentication server, and users who issue shot blasting machine control commands via mobile terminal devices;

[0015] Users who issue shot blasting machine control commands via mobile terminal devices must register their user control permissions on the security authentication server.

[0016] Users who issue shot blasting machine control commands via mobile terminal devices must log in and authenticate on the security authentication server. After successful authentication, the mobile terminal device connects to the host computer through the security authentication server.

[0017] Preferably, the communication permissions of the host computer include a secure communication tag and a secure communication number.

[0018] Preferably, the communication permissions of the user who issues the shot blasting machine control command on the mobile terminal device include: a first security communication tag, a second security communication tag, and a security communication number.

[0019] Preferably, the communication permissions of the security authentication server include: a first security communication tag, a second security communication tag, and a security communication number.

[0020] Preferably, the user who issues the shot blasting machine control command on the mobile terminal device registers user communication permissions on the security authentication server and obtains a valid user registration number.

[0021] Compared with the prior art, the present invention has the following beneficial technical effects:

[0022] This invention provides a technical solution for secure and reliable authentication of user identities who issue shot blasting machine control commands via mobile terminal devices. This solution applies the principle of certificate-free public key cryptography to the industrial Internet of Things (IoT) environment, which significantly improves the computational efficiency during the execution of the secure and reliable authentication process while ensuring the security of the industrial IoT application server (host computer). Detailed Implementation

[0023] Example 1:

[0024] A shot blasting machine intelligent control system includes: a PLC-based shot blasting machine control system, a host computer MCCSP running a shot blasting machine control service program, a mobile terminal device Tcappi running a shot blasting machine control application program, and a security authentication server Ssa.

[0025] In a PLC-based shot blasting machine control system, the PLC is used to control the processes of starting, running, shot blasting, alarming, and dust removal of the shot blasting machine. By recognizing the input of switch quantities, it realizes the start and stop control of the external AC contactor according to the set start process, thereby realizing the control of the peripheral motor.

[0026] In the PLC-based shot blasting machine control system, the PLC controller exchanges data with the host computer MCCSP via Ethernet. The host computer MCCSP exchanges data with the mobile terminal device Tcappi via HTTP protocol. The mobile terminal device Tcappi transmits the user's control commands from the UI to the host computer MCCSP, enabling remote control of the shot blasting machine.

[0027] Furthermore, the mobile terminal device Tcappi connects to the host computer MCCSP through the security authentication server Ssa. The security authentication server Ssa is used to perform secure and reliable authentication of the user's identity when issuing shot blasting machine control commands through the mobile terminal device Tcappi.

[0028] Example 2:

[0029] The method for securely and reliably authenticating the identity of users who issue shot blasting machine control commands via mobile terminal devices (Tcpi) using the security authentication server Ssa includes the following specific steps:

[0030] Step 1: Perform initial configuration of the Security Authentication Server (SSA). The specific steps are as follows:

[0031] Select a large prime number p with a bit length of K, where K is a given security parameter;

[0032] Define a bilinear mapping e: G1×G1→G2;

[0033] G1 and G2 are both multiplicative cyclic groups of order p, and g is a generator of G1;

[0034] Choose a hash function H(·);

[0035] Choose collision-resistant hash functions H1 and H2:

[0036] H1: {0,1} * →G1;

[0037] H2: {0,1} * →G1;

[0038] Public parameters (e, G1, G1, p, g, H1, H2);

[0039] Step two involves generating identity information for the host computer MCCSP, the security authentication server SSA, and the user Ui that issues shot blasting machine control commands via the mobile terminal device TCPI. The specific steps are as follows:

[0040] Set the name of the host computer MCCSP in the intelligent control system of the shot blasting machine as DN (MCcsp):

[0041] DN(MCcsp)∈{0,1} * ;

[0042] Configure the security authentication server Ssa in the intelligent control system of the shot blasting machine as DN(Ssa):

[0043] DN(Ssa)∈{0,1} * ;

[0044] Calculate the identity information ID (Ssa) of the security authentication server Ssa:

[0045] ID(Ssa)=DN(MCcsp)∥DN(Ssa);

[0046] Where ∥ represents the splicing operation;

[0047] In the intelligent control system of the shot blasting machine, the user Ui who issues control commands to the shot blasting machine via the mobile terminal device Tcpi is named DN(Ui)∈{0,1}. * Calculate the identity information of user Ui who issues shot blasting machine control commands through mobile terminal device Tcpi: ID(Ui) = DN(MCcsp)∥DN(Ui);

[0048] Public parameters (ID(Ssa), ID(Ui));

[0049] Step 3: Generate communication permissions for the host computer MCCSP. The specific steps are as follows:

[0050] The host computer selects the secure communication flag SCM (MCcsp) ← R Z p * Calculate the secure communication number SCN(MCcsp) = g^SCM(MCcsp), and publish the secure communication number SCN(MCcsp);

[0051] Among them, SCM(MCcsp)← R Z p * Indicates that Z follows a uniform distribution p * Select an element SCM (MCcsp) from {1,2,…p-1};

[0052] Step four: Generate communication permissions for the user UI of the mobile terminal device Tcpi to issue shot blasting machine control commands. The specific operations are as follows:

[0053] (1) User Ui, who issues shot blasting machine control commands via mobile terminal device Tcpi, selects the first secure communication flag SCMⅠ(Ui)← R Z p * Calculate the secure communication number SCN(Ui) = g^SCMⅠ(Ui), and publish the secure communication number SCN(Ui);

[0054] Wherein, SCMⅠ(Ui)← R Z p * Indicates that Z follows a uniform distribution p * Select element SCMⅠ(Ui) from the list;

[0055] (2) The host computer MCCSP calculates the auxiliary generation information AigiI(Ui) of the second security communication tag SCMⅡ(Ui) of the user Ui who issues shot blasting machine control commands through the mobile terminal device Tcpi:

[0056] AigI(Ui)=[SCN(Ui)^SCM(MCcsp)]×[h(Ui)^SCM(MCcsp)];

[0057] Where h(Ui) = H1(ID(Ui));

[0058] h(Ui) is the identity hash value of the user Ui who issues shot blasting machine control commands through the mobile terminal device Tcpi;

[0059] The auxiliary generation information AigI(Ui) is sent to the user Ui who issues shot blasting machine control commands through the mobile terminal device Tcpi;

[0060] (3) User Ui who sends shot blasting machine control command through mobile terminal device Tcpi calculates the second security communication tag SCMⅡ(Ui) and verifies whether equation (1) holds true;

[0061] Where SCMⅡ(Ui)=AigI(Ui)÷[SCN(MCcsp)^SCMⅠ(Ui)];

[0062] e(SCMⅡ(Ui), g)=e(H1(ID(Ui)), SCN(MCcsp)) (1)

[0063] If equation (1) is not true, then output a failure label; otherwise, generate a security communication label (SCMⅠ(Ui), SCMⅡ(Ui)) for the user Ui who sends the shot blasting machine control command through the mobile terminal device Tcpi.

[0064] Step 5: Generate communication permissions for the Security Authentication Server (SSA). The specific steps are as follows:

[0065] (1) The security authentication server Ssa selects the first secure communication tag SCMⅠ(Ssa)← R Z p * Calculate the secure communication number SCN(Ssa) = g^SCMⅠ(Ssa), and publish the secure communication number SCN(Ssa);

[0066] Among them, SCMⅠ(Ssa)← R Z p * Indicates that Z follows a uniform distribution p * Select element SCMⅠ(Ssa);

[0067] (2) The auxiliary generation information AigiI (Ssa) of the second security communication tag SCMⅡ (Ssa) of the host computer MCCSP computing security authentication server Ssa:

[0068] AigI(Ssa)=[SCN(Ssa)^SCM(MCcsp)]×[h(Ssa)^SCM(MCcsp)];

[0069] Where h(Ssa) = H1(ID(Ssa));

[0070] h(Ssa) is the identity hash value of the security authentication server Ssa;

[0071] Send the auxiliary generation information AigiI(Ssa) to the security authentication server Ssa;

[0072] (3) The security authentication server Ssa calculates the second security communication tag SCMⅡ(Ssa) and verifies whether equation (2) holds true;

[0073] Where SCMⅡ(Ssa)=AigI(Ssa)÷[SCN(MCcsp)^SCMⅠ(Ssa)];

[0074] e(SCMⅡ(Ssa),g)=e(H1(ID(Ssa)),SCN(MCcsp)) (2)

[0075] If equation (2) is not true, a failure label is output; otherwise, the security authentication server Ssa generates a security communication label (SCMⅠ(Ssa), SCMⅡ(Ssa)).

[0076] Step 6: The user's UI, which issues shot blasting machine control commands via the mobile terminal device Tcpi, registers user communication permissions on the security authentication server Ssa. The specific steps are as follows:

[0077] (1) User Ui, who issues shot blasting machine control commands via mobile terminal device Tcpi, selects a registration number RN(Ui) ← R Z p * ; where RN(Ui)← R Z p * Indicates that Z follows a uniform distribution p * Select element RN(Ui) from the list;

[0078] (2) The user Ui, which issues shot blasting machine control commands via the mobile terminal device Tcpi, performs the following calculation process:

[0079] Calculate the registration certificate RC(Ui) = g^RN(Ui);

[0080] Calculate the first registration information RI-Ⅰ(Ui)=H2(ID(Ui)∥ID(Ssa));

[0081] Calculate the second registration information RI-Ⅱ(Ui) = RI-Ⅰ(Ui) × RC(Ui);

[0082] Calculate the third registration information RI-Ⅲ(Ui) = [RI-Ⅱ(Ui)^SCMⅠ(Ui)] × SCMⅡ(Ui);

[0083] Output the registration request RegReq = {ID(Ui), RC(Ui), RI-Ⅰ(Ui), RI-Ⅲ(Ui)};

[0084] Send the registration request RegReq to the security authentication server Ssa;

[0085] (3) The security authentication server Ssa performs the following operations:

[0086] Check if ID(Ui) exists in the registered user information table Tregister;

[0087] If the registered user information table Tregister already stores ID(Ui), then the registered flag is returned; otherwise, the user Ui who issues the shot blasting machine control command through the mobile terminal device Tcpi verifies whether equation (3) is true or false.

[0088] e(RI-Ⅲ(Ui), g)=e(RC(Ui)×RI-Ⅰ(Ui), SCN(Ui))×e(H1(ID(Ui)), SCN(MCcsp))(3)

[0089] If equation (3) is not true, a failure flag is output; otherwise, the security authentication server Ssa performs the following operations:

[0090] Select the registration marker RM(Ui) ← R Z p * ; where RM(Ui)← R Z p * Indicates that Z follows a uniform distribution p * Select an element RM(Ui) from {1,2,…p-1};

[0091] Calculate the registration response information RRI(Ui) = g^RM(Ui);

[0092] Store ID(Ui), RM(Ui), RRI(Ui), and RI-Ⅰ(Ui) in the registered user information table Tregister;

[0093] Perform the following calculations:

[0094] Calculate the first registration parameter RP-Ⅰ(Ui)=H2(ID(Ssa)∥ID(Ui));

[0095] Calculate the second registration parameter RP-Ⅱ(Ui) = RRI(Ui) × RP-Ⅰ(Ui);

[0096] Calculate the third registration parameter RP-Ⅲ(Ui) = [RP-Ⅱ(Ui)^SCMⅠ(Ssa)] × SCMⅡ(Ssa));

[0097] Output the registration response information RegRes = {ID(Ssa), RRI(Ui), RP-Ⅲ(Ui)};

[0098] The registration response information RegRes is sent to the user Ui who issued shot blasting machine control commands via the mobile terminal device Tcpi.

[0099] (4) User Ui, who issues shot blasting machine control commands through mobile terminal device Tcpi, verifies the validity of equation (4) by executing a calculation program;

[0100] Calculate the first registration parameter RP-Ⅰ(Ui)=H2(ID(Ssa)∥ID(Ui));

[0101] Calculate the second registration parameter RP-Ⅱ(Ui) = RRI(Ui) × RP-Ⅰ(Ui);

[0102] e(RP-Ⅲ(Ui), g)=e(RP-Ⅱ(Ui), SCN(Ssa))×e(H1(ID(Ssa)), SCN(MCcsp)) (4)

[0103] If equation (4) is not true, then the registration failure label will be output; otherwise, the user Ui who sends the shot blasting machine control command through the mobile terminal device Tcpi will be successfully registered on the security authentication server Ssa.

[0104] Step 7: The user UI that issues shot blasting machine control commands via the mobile terminal device Tcpi logs in and authenticates on the security authentication server Ssa. The specific operation is as follows:

[0105] (1) The user Ui who issues shot blasting machine control commands via the mobile terminal device Tcpi selects the login authentication number LAN(Ui)← R Z p * ; where LAN(Ui)← R Z p * Indicates that Z follows a uniform distribution p * Select element LAN(Ui) from the list;

[0106] The user UI, which issues shot blasting machine control commands via the mobile terminal device Tcpi, performs the following calculation process:

[0107] Calculate the first registration information RI-Ⅰ(Ui)=H2(ID(Ui)∥ID(Ssa));

[0108] Calculate the login authentication credential LAC(Ui) = g^LAN(Ui);

[0109] Output the login authentication request AuthReq = {ID(Ui), LAC(Ui), RI-Ⅰ(Ui)};

[0110] Send the login authentication request AuthReq to the security authentication server Ssa;

[0111] (2) The security authentication server Ssa queries the registered user information table Tregister to see if the RI-Ⅰ(Ui) value stored in the table is equal to the received value based on the ID(Ui);

[0112] If they are not equal, an error message is returned; otherwise, the security authentication server Ssa performs the following operation:

[0113] Select auxiliary authentication parameter AAP(Ssa→Ui)← R Z p * ; where AAP(Ssa→Ui)← R Z p * Indicates that Z follows a uniform distribution p * Select element AAP(Ssa→Ui) from the list;

[0114] Calculate the auxiliary authentication information AAI(Ssa→Ui)=g^AAP(Ssa→Ui);

[0115] Calculate the shared authentication information SAI(Ssa→Ui)=RC(Ui)^RM(Ui);

[0116] Calculate the authentication hash value VⅠ(Ssa→Ui)=H(SAI(Ssa→Ui)∥LAC(Ui));

[0117] Output authentication response information AuthRes = {ID(Ssa), AAI(Ssa→Ui), VⅠ(Ssa→Ui)};

[0118] Send the authentication response information AuthRes to the user Ui who issued the shot blasting machine control command through the mobile terminal device Tcpi;

[0119] (3) User Ui who issues shot blasting machine control commands through mobile terminal device Tcpi queries the registration response information RRI(Ui) in registration response information RegRes based on ID(Ssa);

[0120] Calculate the shared authentication information SAI(Ui→Ssa)=RRI(Ui)^RN(Ui);

[0121] Calculate the authentication hash value VⅠ(Ui→Ssa)=H(SAI(Ui→Ssa)∥LAC(Ui));

[0122] Verify whether VⅠ(Ui→Ssa) and VⅠ(Ssa→Ui) are equal;

[0123] If VⅠ(Ui→Ssa) and VⅠ(Ssa→Ui) are not equal, the authentication of the security authentication server Ssa fails. Otherwise, the user Ui who sends the shot blasting machine control command through the mobile terminal device Tcpi completes the authentication of the security authentication server Ssa.

[0124] User Ui, who issues shot blasting machine control commands through mobile terminal device Tcpi, calculates the authentication hash value VⅡ(Ui→Ssa)=H(SAI(Ui→Ssa)∥AAI(Ssa→Ui)) and sends the hash value VⅡ(Ui→Ssa) to the security authentication server Ssa.

[0125] (4) The security authentication server Ssa calculates the authentication hash value VⅡ (Ssa→Ui):

[0126] VⅡ(Ssa→Ui)=H(SAI(Ssa→Ui)∥AAI(Ssa→Ui));

[0127] Verify whether VⅡ(Ui→Ssa) and VⅡ(Ssa→Ui) are equal;

[0128] If VⅡ(Ui→Ssa) and VⅡ(Ssa→Ui) are not equal, the authentication of the user Ui who sends the shot blasting machine control command through the mobile terminal device Tcpi fails, and the authentication process is terminated.

[0129] Conversely, the security authentication server Ssa completes the authentication of the user's Ui identity who issues shot blasting machine control commands through the mobile terminal device Tcpi;

[0130] At this point, the mobile terminal device Tcappi connects to the host computer MCCSP through the security authentication server Ssa.

Claims

1. An intelligent control system for a shot blasting machine, characterized in that, include: The system consists of a PLC-based shot blasting machine control system, a host computer (MCcsp) running shot blasting machine control service programs, a mobile terminal device running shot blasting machine control applications, and a security authentication server (Ssa). The PLC in the PLC-based shot blasting machine control system is used to control the start-up, operation, shot blasting, alarm, and dust removal processes of the shot blasting machine. The PLC controller exchanges data with the host computer MCCSP via Ethernet, and the host computer MCCSP enables remote control of the shot blasting machine. The mobile terminal device accesses the host computer MCcsp through the security authentication server Ssa. The host computer MCcsp exchanges data with the mobile terminal device through the HTTP protocol. The mobile terminal device transmits the user UI control commands to the host computer MCcsp through the shot blasting machine control application. The security authentication server Ssa is used to perform secure and reliable authentication of the user's UI identity when issuing shot blasting machine control commands through the mobile terminal device. The secure and reliable authentication method includes the following steps: Step 1, Initialize configuration: Choose a large prime number p with a bit length of K, where K is a given security parameter; Define a bilinear mapping e: G1×G1→G2; Where G1 and G2 are both multiplicative cyclic groups of order p, and g is a generator of G1; Choose a hash function H(·) and collision-resistant hash functions H1 and H2, where: H1:{0,1} * →G1;H2:{0,1} * →G1; Definition: Z p * ={1,2,…p-1}; Step 2, generate identity information: The host computer MCcsp is named DN(MCcsp) in the intelligent control system of the shot blasting machine, where: DN(MCcsp)∈{0,1} * ; The security authentication server Ssa is named DN(Ssa) in the intelligent control system of the shot blasting machine, where: DN(Ssa)∈{0,1} * ; Calculate the identity information ID (Ssa) of the security authentication server Ssa: ID(Ssa)=DN(MCcsp)‖DN(Ssa); The user Ui is assigned the name DN(Ui) in the intelligent control system of the shot blasting machine, where: DN(Ui)∈{0,1} * ; Calculate the identity information ID(Ui) of the user Ui: ID(Ui) = DN(MCcsp) || DN(Ui); Here, ‖ represents the concatenation operation, and exposes ID(Ssa) and ID(Ui); Step 3: Generate the communication permissions for the host computer MCCSP: The host computer MCCSP starts from Z, which conforms to a uniform distribution. p * Select the Secure Communication Marker (SCM) (MCcsp) and calculate the Secure Communication Number (SCN) (MCcsp): SCN(MCcsp)=g^SCM(MCcsp); And disclose the secure communication number SCN (MCcsp); Step 4: Generate the communication permissions for the user UI: The user Ui is derived from Z, which conforms to a uniform distribution. p * Select the first secure communication tag SCMⅠ(Ui) and calculate the secure communication number SCN(Ui): SCN(Ui) = g^SCMⅠ(Ui); And disclose the secure communication number SCN(Ui); The host computer MCCSP calculates the auxiliary generation information Aigi(Ui) of the second secure communication tag SCMⅡ(Ui) of the user Ui: AigI(Ui)=[SCN(Ui)^SCM(MCcsp)]×[H1(ID(Ui))^SCM(MCcsp)]; And send the auxiliary generation information AigI(Ui) to the user Ui; The user Ui calculates the second secure communication tag SCMⅡ(Ui): SCMⅡ(Ui)=AigI(Ui)÷[SCN(MCcsp)^SCMⅠ(Ui)]; And verify whether the following formula is true: e(SCMⅡ(Ui), g)=e(H1(ID(Ui)), SCN(MCcsp)) (1) When equation (1) is true, the user Ui generates a secure communication tag: (SCMⅠ(Ui), SCMⅡ(Ui)); Step 5: Generate communication permissions for the security authentication server SSA: The security authentication server Ssa follows a uniformly distributed Z... p * Select the first secure communication tag SCMⅠ(Ssa) and calculate the secure communication number SCN(Ssa): SCN(Ssa) = g^SCMⅠ(Ssa); And disclose the secure communication number SCN(Ssa); The host computer MCCSP calculates the auxiliary generation information Aigi(Ssa) of the second security communication tag SCMⅡ(Ssa) of the security authentication server Ssa: AigI(Ssa)=[SCN(Ssa)^SCM(MCcsp)]×[H1(ID(Ssa))^SCM(MCcsp)]; And send the auxiliary generation information Aigi(Ssa) to the security authentication server Ssa; The security authentication server Ssa calculates the second secure communication tag SCMⅡ(Ssa): SCMⅡ(Ssa)=AigI(Ssa)÷[SCN(MCcsp)^SCMⅠ(Ssa)]; And verify whether the following formula is true: e(SCMⅡ(Ssa), g)=e(H1(ID(Ssa)), SCN(MCcsp)) (2) When equation (2) is true, the security authentication server Ssa generates a security communication tag: (SCMⅠ(Ssa), SCMⅡ(Ssa)); Step six: The user Ui registers user communication permissions on the security authentication server Ssa: The user Ui is derived from Z, which conforms to a uniform distribution. p * Select the registration number RN(Ui) and calculate the registration certificate RC(Ui): RC(Ui) = g^RN(Ui); Calculate the first registration information RI-Ⅰ(Ui)=H2(ID(Ui)‖ID(Ssa)); Calculate the second registration information RI-Ⅱ(Ui) = RI-Ⅰ(Ui) × RC(Ui); Calculate the third registration information RI-Ⅲ(Ui) = [RI-Ⅱ(Ui)^SCMⅠ(Ui)] × SCMⅡ(Ui); Generate a registration request RegReq: RegReq={ID(Ui), RC(Ui), RI-Ⅰ(Ui), RI-Ⅲ(Ui)}; And send the registration request RegReq to the security authentication server Ssa; The security authentication server Ssa queries the registered user information table Tregister to see if the ID (Ui) exists. If the ID (Ui) is already stored in the registered user information table Tregister, it returns a registered flag. When the registered user information table Tregister does not contain ID(Ui) and the following formula is true: e(RI-Ⅲ(Ui), g)=e(RC(Ui)×RI-Ⅰ(Ui), SCN(Ui))×e(H1(ID(Ui)), SCN(MCcsp)) (3) The security authentication server Ssa follows a uniformly distributed Z... p * Select the registration marker RM(Ui) and calculate the registration response information RRI(Ui): RRI(Ui) = g^RM(Ui); And store ID(Ui), RM(Ui), RRI(Ui), and RI-Ⅰ(Ui) in the registered user information table Tregister; The security authentication server Ssa calculates the first registration parameter RP-Ⅰ(Ui): RP-Ⅰ(Ui)=H2(ID(Ssa)‖ID(Ui)); Calculate the second registration parameter RP-Ⅱ(Ui): RP-Ⅱ(Ui)=RRI(Ui)×RP-Ⅰ(Ui); Calculate the third registration parameter RP-Ⅲ(Ui): RP-Ⅲ(Ui)=[RP-Ⅱ(Ui)^SCMⅠ(Ssa)]×SCMⅡ(Ssa); RegRes registration response information is generated: RegRes={ID(Ssa),RRI(Ui),RP-Ⅲ(Ui)}; The registration response information RegRes is then sent to the user Ui. The user UI is calculated as follows: RP-Ⅰ(Ui)=H2(ID(Ssa)‖ID(Ui)); RP-Ⅱ(Ui)=RRI(Ui)×RP-Ⅰ(Ui); And verify whether the following formula is true: e(RP-Ⅲ(Ui), g)=e(RP-Ⅱ(Ui), SCN(Ssa))×e(H1(ID(Ssa)), SCN(MCcsp)) (4) When equation (4) is true, the user Ui successfully registers on the security authentication server Ssa; Step 7: The user Ui performs login authentication on the security authentication server Ssa: The user Ui is derived from Z, which conforms to a uniform distribution. p * Select the login authentication number LAN(Ui) and calculate the first registration information RI-Ⅰ(Ui): RI-Ⅰ(Ui)=H2(ID(Ui)‖ID(Ssa)); Calculate login authentication credentials LAC(Ui): LAC(Ui) = g^LAN(Ui); Create a login authentication request AuthReq: AuthReq={ID(Ui), LAC(Ui), RI-Ⅰ(Ui)}; And send the login authentication request AuthReq to the security authentication server Ssa; The security authentication server Ssa queries the RI-Ⅰ(Ui) stored in the registered user information table Tregister according to the ID(Ui), compares the stored RI-Ⅰ(Ui) with the received RI-Ⅰ(Ui), and returns an error message when the two are not equal. When the two are equal, the security authentication server Ssa follows a uniformly distributed Z... p * Select the auxiliary authentication parameter AAP(Ssa→Ui) and calculate the auxiliary authentication information AAI(Ssa→Ui): AAI(Ssa→Ui)=g^AAP(Ssa→Ui); Calculate shared authentication information SAI (Ssa→Ui): SAI(Ssa→Ui)=RC(Ui)^RM(Ui); Calculate the authentication hash value VⅠ(Ssa→Ui): VⅠ(Ssa→Ui)=H(SAI(Ssa→Ui)‖LAC(Ui)); AuthRes is generated as the authentication response information. AuthRes={ID(Ssa), AAI(Ssa→Ui), VⅠ(Ssa→Ui)}; And send the authentication response information AuthRes to the user Ui; The user Ui queries the RRI(Ui) in the registration response information RegRes based on the ID (Ssa) and calculates the shared authentication information SAI(Ui→Ssa): SAI(Ui→Ssa)=RRI(Ui)^RN(Ui); Calculate the authentication hash value VI (Ui→Ssa): VⅠ(Ui→Ssa)=H(SAI(Ui→Ssa)‖LAC(Ui)); Then compare VI(Ui→Ssa) with VI(Ssa→Ui). When the two are equal, the user Ui has completed the authentication of the identity of the security authentication server Ssa. The user Ui calculates the authentication hash value VⅡ(Ui→Ssa): VⅡ(Ui→Ssa)=H(SAI(Ui→Ssa)‖AAI(Ssa→Ui)); And send VⅡ(Ui→Ssa) to the security authentication server Ssa; The security authentication server Ssa calculates the authentication hash value VⅡ(Ssa→Ui): VⅡ(Ssa→Ui)=H(SAI(Ssa→Ui)‖AAI(Ssa→Ui)); The system compares VII(Ui→Ssa) with VII(Ssa→Ui). When they are equal, the security authentication server Ssa completes the authentication of the user Ui's identity. After successful authentication, the mobile terminal device accesses the host computer MCcsp through the security authentication server Ssa.