Two-way authentication methods and related equipment

Abstract

The application provides a bidirectional authentication method and related equipment, and relates to the fields of network technology and security technology.The method comprises the following steps: a first communication device sends a first time-varying parameter and a first device identifier to an authentication center; receives first authentication data; and verifies the first authentication data based on a first physically unclonable function chip, generates second authentication data in the case that the first authentication data is verified, sends the second authentication data to a second communication device, receives third authentication data, verifies the third authentication data, and the bidirectional authentication of the first communication device and the second communication device is successful in the case that the third authentication data is verified.The application can realize the bidirectional authentication of the two communication parties without sharing the key in advance, can cope with the quantum computing threat faced by the public key cryptography, solves the problem of traditional symmetric key management by using the physically unclonable function, and can prevent the communication device from being imitated, so that the security of the authentication is improved.

Description

Technical Field

[0001] This disclosure relates to the fields of network technology and security technology, and in particular to a two-way authentication method, a two-way authentication device, an electronic device, a computer-readable storage medium, and a computer program product. Background Technology

[0002] Two-way authentication, which verifies the identity of the sender and receiver of information, is a crucial measure for ensuring network security. Currently, common authentication technologies include password-based, biometric-based, and cryptographic-based authentication. Cryptographic-based authentication technologies are further divided into symmetric cryptography-based authentication and public-key cryptography-based authentication. Symmetric cryptography-based two-way authentication is primarily implemented through a pre-shared symmetric key.

[0003] In related technologies, public-key cryptography algorithms are based on computational complexity issues. With future advancements in quantum computing technology, these algorithms will face potential threats. The practical application of quantum computers may render classical public-key cryptography algorithms vulnerable, thereby impacting the security of Public Key Infrastructure (PKI).

[0004] It should be noted that the information disclosed in the background section above is only used to enhance the understanding of the background of this disclosure, and therefore may include information that does not constitute prior art known to those skilled in the art. Summary of the Invention

[0005] This disclosure provides a two-way authentication method and related equipment, which can at least partially address the quantum computing threat faced by public-key cryptography and improve authentication security.

[0006] Other features and advantages of this disclosure will become apparent from the following detailed description, or may be learned in part from practice of this disclosure.

[0007] According to one aspect of this disclosure, a two-way authentication method is provided, applied to a first communication device, the first communication device having a first physically unclonable function chip installed, comprising: sending a first time-varying parameter and a first device identifier to an authentication center, the first device identifier being used to identify a second communication device, so that the authentication center generates first authentication data based on the first time-varying parameter and the first device identifier; receiving the first authentication data; verifying the first authentication data based on the first physically unclonable function chip, and generating second authentication data if the first authentication data verification is successful; sending the second authentication data to the second communication device, so that the second communication device verifies the second authentication data, and generating third authentication data if the second authentication data verification is successful; receiving the third authentication data; verifying the third authentication data, and if the third authentication data verification is successful, the first communication device and the second communication device successfully achieve two-way authentication.

[0008] According to another aspect of this disclosure, a two-way authentication method is also provided, applied to a second communication device, the second communication device having a second physical non-cloning function chip installed, comprising: receiving second authentication data sent by a first communication device, the second authentication data being generated by the first communication device verifying first authentication data based on the first physical non-cloning function chip, provided that the first authentication data verification is successful; verifying the second authentication data based on the second physical non-cloning function chip, and generating third authentication data provided that the second authentication data verification is successful; sending the third authentication data to the first communication device, so that the first communication device verifies the third authentication data, and if the third authentication data verification is successful, the first communication device and the second communication device successfully perform two-way authentication.

[0009] According to another aspect of this disclosure, a two-way authentication method is also provided, applied to an authentication center, comprising: receiving a first time-varying parameter and a first device identifier sent by a first communication device, the first device identifier being used to identify a second communication device; generating first authentication data based on the first time-varying parameter and the first device identifier; and sending the first authentication data to the first communication device.

[0010] According to another aspect of this disclosure, a two-way authentication device is also provided, applied to a first communication device, the first communication device having a first physically unclonable function chip installed, comprising: a first transmitting module, configured to transmit a first time-varying parameter and a first device identifier to an authentication center, the first device identifier being used to identify a second communication device, so that the authentication center generates first authentication data based on the first time-varying parameter and the first device identifier; a first receiving module, configured to receive the first authentication data; a first verification module, configured to verify the first authentication data based on the first physically unclonable function chip, and generate second authentication data if the first authentication data verification passes; the first transmitting module is further configured to transmit the second authentication data to the second communication device, so that the second communication device verifies the second authentication data, and generates third authentication data if the second authentication data verification passes; the first receiving module is further configured to receive the third authentication data; the first verification module is further configured to verify the third authentication data, and if the third authentication data verification passes, the first communication device and the second communication device successfully achieve two-way authentication.

[0011] According to another aspect of this disclosure, a two-way authentication device is also provided, applied to a second communication device, the second communication device having a second physical unclonable function chip installed, comprising: a second receiving module, configured to receive second authentication data sent by a first communication device, the second authentication data being generated by the first communication device verifying the first authentication data based on the first physical unclonable function chip, provided that the first authentication data passes verification; a second verification module, configured to verify the second authentication data based on the second physical unclonable function chip, and generate third authentication data provided that the second authentication data passes verification; and a second sending module, configured to send the third authentication data to the first communication device, so that the first communication device verifies the third authentication data, and provided that the first communication device and the second communication device successfully perform two-way authentication upon successful verification of the third authentication data.

[0012] According to another aspect of this disclosure, a two-way authentication device is also provided, applied to an authentication center, comprising: a third receiving module for receiving a first time-varying parameter and a first device identifier sent by a first communication device, the first device identifier being used to identify a second communication device; a generating module for generating first authentication data based on the first time-varying parameter and the first device identifier; and a third sending module for sending the first authentication data to the first communication device.

[0013] According to another aspect of this disclosure, an electronic device is also provided, comprising: a processor; and a memory for storing executable instructions of the processor; wherein the processor is configured to perform the two-way authentication method described in any of the preceding claims by executing the executable instructions.

[0014] According to another aspect of this disclosure, a computer-readable storage medium is also provided, on which a computer program is stored, which, when executed by a processor, implements the two-way authentication method described in any one of the preceding claims.

[0015] According to another aspect of this disclosure, a computer program product is also provided, comprising: a computer program or instructions that, when executed by a processor, implement the bidirectional authentication method of any one of the above.

[0016] In the embodiments of this disclosure, a first communication device is equipped with a first physically unclonable function chip. The first communication device sends a first time-varying parameter and a first device identifier to an authentication center. The first device identifier is used to identify a second communication device, so that the authentication center generates first authentication data based on the first time-varying parameter and the first device identifier. The first communication device receives the first authentication data and verifies it based on the first physically unclonable function chip. If the first authentication data passes verification, it generates second authentication data. The first communication device sends the second authentication data to the second communication device, so that the second communication device verifies the second authentication data. If the second authentication data passes verification, it generates third authentication data. The first communication device receives the third authentication data and verifies it. If the third authentication data passes verification, the two-way authentication between the first and second communication devices is successful. In this disclosure, the first communication device receives the first authentication data and generates the second authentication data if the first authentication data passes verification. The second communication device verifies the second authentication data and generates the third authentication data if the verification passes. The first communication device verifies the third authentication data, and if the third authentication data passes verification, the two-way authentication between the first and second communication devices is completed. The first and second communication devices complete two-way authentication through multiple exchanges of authentication data. This method can achieve two-way authentication between the two parties without prior sharing of keys. It can address the quantum computing threat faced by public-key cryptography, solve the problem of traditional symmetric key management using physically non-clonable functions, prevent communication devices from being counterfeited, verify the authenticity of the communication device's identity, and improve the security of authentication.

[0017] Furthermore, this disclosure verifies the first authentication data by using a first physically unclonable function chip, which can prevent attackers from stealing key information and provides higher security than using the same preset key for a long time.

[0018] It should be understood that the above general description and the following detailed description are exemplary and explanatory only, and are not intended to limit this disclosure. Attached Figure Description

[0019] The accompanying drawings, which are incorporated in and form part of this specification, illustrate embodiments consistent with this disclosure and, together with the description, serve to explain the principles of this disclosure. It is obvious that the drawings described below are merely some embodiments of this disclosure, and those skilled in the art can obtain other drawings based on these drawings without any inventive effort.

[0020] Figure 1 A schematic diagram of a two-way authentication method system structure is shown in an embodiment of this disclosure.

[0021] Figure 2 A flowchart of a two-way authentication method according to an embodiment of this disclosure is shown.

[0022] Figure 3 A flowchart of a two-way authentication method according to another embodiment of this disclosure is shown.

[0023] Figure 4 A flowchart of a two-way authentication method is shown in another embodiment of this disclosure.

[0024] Figure 5 The signaling diagram of the two-way authentication method in an embodiment of this disclosure is shown.

[0025] Figure 6 A schematic diagram of a two-way authentication device is shown in one embodiment of this disclosure.

[0026] Figure 7 A schematic diagram of a two-way authentication device is shown in another embodiment of this disclosure.

[0027] Figure 8 A schematic diagram of a two-way authentication device is shown in another embodiment of this disclosure.

[0028] Figure 9 A structural block diagram of an electronic device according to an embodiment of the present disclosure is shown. Detailed Implementation

[0029] Exemplary embodiments will now be described more fully with reference to the accompanying drawings. However, these exemplary embodiments can be implemented in many forms and should not be construed as limited to the examples set forth herein; rather, they are provided so that this disclosure will be more comprehensive and complete, and will fully convey the concept of the exemplary embodiments to those skilled in the art. The described features, structures, or characteristics may be combined in any suitable manner in one or more embodiments.

[0030] Furthermore, the accompanying drawings are merely illustrative of this disclosure and are not necessarily drawn to scale. The same reference numerals in the drawings denote the same or similar parts, and therefore repeated descriptions of them will be omitted. Some block diagrams shown in the drawings are functional entities and do not necessarily correspond to physically or logically independent entities. These functional entities may be implemented in software, in one or more hardware modules or integrated circuits, or in different network and / or processor devices and / or microcontroller devices.

[0031] Physically Unclonable Functions (PUFs) leverage the unique physical characteristics of terminal device hardware to prevent devices from being cloned or counterfeited. PUFs can dynamically generate sensitive information when needed, rather than storing this information in non-volatile memory, thus enhancing security. The core principle of PUFs stems from the inherent differences in the microstructure of physical entities (such as chips and materials) due to process variations and material inhomogeneities during manufacturing. These differences are unavoidable and difficult to control precisely, giving each physical entity a unique "fingerprint" characteristic. When a specific challenge is input into the PUF, it generates a corresponding response based on its unique physical characteristics. Each challenge corresponds to a unique response; this specific challenge-response pair is called a Challenge-Response Pair (CRP).

[0032] Two-way authentication is a crucial means of verifying the authenticity of information senders and receivers and is a key measure for ensuring network security. Existing identity authentication technologies mainly include password-based, biometric-based, and cryptographic-based authentication. Cryptographic authentication technologies can be divided into symmetric cryptography and public-key cryptography. Two-way authentication based on symmetric cryptography can be implemented using a pre-shared symmetric key. However, public-key cryptography algorithms, which rely on computational complexity, will face threats due to advancements in quantum computing technology. Once practical quantum computers become available, classical public-key cryptography algorithms will be at high risk, and public key infrastructures (PKI) will also be affected.

[0033] Based on this, this disclosure provides a two-way authentication method applicable to two-way authentication scenarios. For example, this disclosure can be applied between data centers and high-security leased line nodes to ensure the authenticity of the identities of the communicating parties. Another example is its application in two-way authentication scenarios in vehicle-to-everything (V2X) and the Internet of Things (IoT) requiring inter-device communication. Yet another example is in future quantum key distribution (QKD). After large-scale deployment, it can be used for two-way authentication between QKD devices. In this disclosure, a first communication device is equipped with a first physically unclonable function (PHF) chip. The first communication device sends a first time-varying parameter and a first device identifier to an authentication center. The first device identifier is used to identify a second communication device, enabling the authentication center to generate first authentication data based on the first time-varying parameter and the first device identifier. The authentication center receives the first authentication data and verifies it based on the first PHF chip. If the first authentication data passes verification, it generates second authentication data. The authentication center then sends the second authentication data to the second communication device, enabling the second communication device to verify the second authentication data. If the second authentication data passes verification, it generates third authentication data. The authentication center receives the third authentication data and verifies it. If the third authentication data passes verification, the two-way authentication between the first and second communication devices is successful. This disclosure discloses a first communication device that receives first authentication data and, if the first authentication data passes verification, generates second authentication data. A second communication device then verifies the second authentication data; if the verification passes, it generates third authentication data. The first communication device then verifies the third authentication data; if the third authentication data passes verification, bidirectional authentication between the first and second communication devices is completed. The first and second communication devices complete bidirectional authentication through multiple exchanges of authentication data, and bidirectional authentication between the communicating parties can be achieved without prior key sharing. This addresses the quantum computing threats faced by public-key cryptography, solves the problems of traditional symmetric key management using physically non-cloning functions, prevents communication devices from being impersonated, confirms the authenticity of the communication device's identity, and improves authentication security.

[0034] Furthermore, this disclosure verifies the first authentication data by using a first physically unclonable function chip, which can prevent attackers from stealing key information and provides higher security than using the same preset key for a long time.

[0035] The specific implementation methods of the embodiments of this disclosure will now be described in detail with reference to the accompanying drawings.

[0036] Figure 1 A schematic diagram of a two-way authentication method system structure is shown in an embodiment of this disclosure. For example... Figure 1As shown, the system architecture can include an authentication center and N communication devices, where N is an integer greater than or equal to 2. The N communication devices can communicate with the authentication center, as well as with any two communication devices, through a network, which can be a wired network or a wireless network.

[0037] Optionally, the aforementioned wireless or wired networks use standard communication technologies and / or protocols. The network is typically the Internet, but can also be any network, including but not limited to Local Area Networks (LANs), Metropolitan Area Networks (MANs), Wide Area Networks (WANs), mobile, wired or wireless networks, private networks, or any combination of virtual private networks. In some embodiments, technologies and / or formats including Hyper Text Markup Language (HTML), Extensible Markup Language (XML), etc., are used to represent data exchanged over the network. Furthermore, conventional encryption technologies such as Secure Socket Layer (SSL), Transport Layer Security (TLS), Virtual Private Networks (VPNs), and Internet Protocol Security (IPSec) can be used to encrypt all or part of the link. In other embodiments, customized and / or dedicated data communication technologies can be used to replace or supplement the aforementioned data communication technologies.

[0038] Communication devices can be electronic devices with communication functions, including but not limited to smartphones, tablets, laptops, desktop computers, smart speakers, smartwatches, wearable devices, augmented reality devices, virtual reality devices, etc.

[0039] This disclosure enables bidirectional authentication between any two communication devices among multiple communication devices. The communicating parties do not need to share keys beforehand; instead, they register with an authentication center based on the PUF chip. Even if the number of communicating parties increases, the key management complexity remains unaffected.

[0040] It should be noted that the PUF chip can generate sensitive information when needed and does not store sensitive information in non-volatile memory, which can prevent attackers from stealing key information and has higher security than using the same preset key for a long time.

[0041] For example, the communication device is equipped with a PUF chip, an authentication data generation / verification module, and an authentication key extraction module. The authentication data generation / verification module has the function of verifying authentication data (such as the first authentication data described below) based on the PUF response and generating authentication data (such as the second authentication data described below) based on the single authentication key. The authentication key extraction module has the function of extracting the single authentication key from the authentication data (such as the first authentication data described below) based on the PUF response.

[0042] An authentication center (AC) is a system or entity that provides authentication services. An authentication center can be a server, which can be a standalone physical server, a server cluster or distributed system consisting of multiple physical servers, or a cloud server that provides basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communications, middleware services, domain name services, security services, CDN (Content Delivery Network), and big data and artificial intelligence platforms.

[0043] For example, the authentication center may include an authentication data generation module and a response database. The authentication data generation module generates authentication data (such as initial authentication data) and a single authentication key, while the response database stores challenge-response pairs from various communication devices. For instance, the response database securely stores several challenge-response pairs reported by each communication device during registration.

[0044] Those skilled in the art will know that Figure 1 The number of communication devices and authentication centers shown is merely illustrative; any number of communication devices and authentication centers can be used as needed. This disclosure does not limit this.

[0045] Under the above system architecture, this disclosure provides a two-way authentication method, which can be executed by any electronic device with computing power.

[0046] Figure 2 A flowchart of a two-way authentication method according to an embodiment of this disclosure is shown, as follows: Figure 2 As shown, the method is applied to a first communication device, which is equipped with a first physically unclonable function chip. The two-way authentication method provided in this embodiment may include the following steps S201 to S206.

[0047] S201, send the first time-varying parameter and the first device identifier to the certification center. The first device identifier is used to identify the second communication device so that the certification center can generate the first certification data based on the first time-varying parameter and the first device identifier.

[0048] In this embodiment of the disclosure, the first time-varying parameter refers to a parameter that changes over time. This disclosure does not limit the specific type of the first time-varying parameter. For example, the first time-varying parameter can be a timestamp, a sequence number, or a random number. The first time-varying parameter is non-repeatable and is used to associate the first communication device with the authentication center.

[0049] It should be noted that when the first communication device sends the first time-varying parameter and the first device identifier to the authentication center, it is equivalent to the first communication device sending a two-way authentication request to the authentication center.

[0050] For example, the first communication device sends a two-way authentication request to the authentication center. The two-way authentication request carries a first time-varying parameter and a first device identifier. The first time-varying parameter is used by the first communication device to associate the two-way authentication request with the response of the authentication center.

[0051] In this embodiment of the disclosure, the first device identifier is used to identify the second communication identifier that performs two-way authentication with the first communication device. This embodiment of the disclosure does not specifically limit the form in which the first device identifier is represented. For example, the first device identifier may be represented by one or more combinations of letters, numbers, symbols, and Chinese characters.

[0052] S202, Receive first authentication data.

[0053] In this embodiment of the present disclosure, the first communication device receives the first authentication data sent by the authentication center.

[0054] S203, based on the first physically unclonable function chip, verifies the first authentication data, and generates the second authentication data if the first authentication data passes the verification.

[0055] In this embodiment of the disclosure, the authentication data generation / verification module of the first communication device generates second authentication data if the first authentication data is verified as successful.

[0056] S204, send second authentication data to the second communication device so that the second communication device can verify the second authentication data, and generate third authentication data if the second authentication data is verified.

[0057] In this embodiment of the present disclosure, the first communication device sends second authentication data to the second communication device, the second communication device verifies the second authentication data, and generates third authentication data if the second authentication data passes verification.

[0058] S205, receiving third-party authentication data.

[0059] In this embodiment of the present disclosure, the first communication device receives third authentication data sent by the second communication device.

[0060] It should be noted that the first authentication data, the second authentication data, and the third authentication data are all data that confirm identity.

[0061] S206, verify the third authentication data. If the third authentication data is verified, the first communication device and the second communication device successfully complete the two-way authentication.

[0062] In this embodiment, the first communication device receives first authentication data and, if the first authentication data passes verification, generates second authentication data. The second communication device verifies the second authentication data, and, if the verification passes, generates third authentication data. The first communication device then verifies the third authentication data, and, if the third authentication data passes verification, completes the two-way authentication between the first and second communication devices. The first and second communication devices complete two-way authentication through multiple exchanges of authentication data, and this method achieves two-way authentication between the communicating parties without prior key sharing. It addresses the quantum computing threats faced by public-key cryptography, solves the problems of traditional symmetric key management using physically non-cloning functions, prevents communication devices from being impersonated, confirms the authenticity of the communication device's identity, and improves authentication security.

[0063] Furthermore, this disclosure verifies the first authentication data by using a first physically unclonable function chip, which can prevent attackers from stealing key information and provides higher security than using the same preset key for a long time.

[0064] The present disclosure will be further illustrated below by means of several exemplary embodiments.

[0065] In one exemplary embodiment, the first authentication data may include a first challenge, first data encrypted with a first response, and second data encrypted with a second response. The first response is the response data of a first communication device, which corresponds to the first challenge, and the second response is the response data of a second communication device.

[0066] The two-way authentication method provided in this disclosure is based on a first physically unclonable function chip. The first authentication data is verified, and if the first authentication data is verified, the generation of the second authentication data may include the following steps A1 to A5.

[0067] Step A1: Input the first challenge into the first physical non-cloning function chip and output the first response.

[0068] In this embodiment of the disclosure, the first data in the first authentication data is data obtained by encrypting the first response. To decrypt the first data, the first communication device needs to generate a first response. The first challenge in the first authentication data corresponds to the first response; that is, the combination of the first challenge and the first response constitutes a challenge-response pair for the first communication device. The first challenge is input into the first physically unclonable function chip, and the first response used to decrypt the first data is output.

[0069] Step A2: Decrypt the first data according to the first response to obtain the first decrypted data. The first decrypted data includes the second challenge, the single authentication key, the first time-varying parameter to be verified, and the first identifier to be verified.

[0070] It should be noted that the single authentication key is generated by the authentication center. Each time the authentication center receives the first time-varying parameter and the first device identifier sent by the first communication device, it generates a single authentication key, and each generated single authentication key is different.

[0071] It should be noted that the first identifier to be verified is the device identifier obtained by decrypting the first data, and it corresponds to the first device identifier. The first time-varying parameter to be verified is the time-varying parameter obtained by decrypting the first data, and it corresponds to the first time-varying parameter.

[0072] Step A3: Verify the first time-varying parameter to be verified and the first identifier to be verified. If the verification is successful, generate the second time-varying parameter.

[0073] In one embodiment, the two-way authentication method provided in this disclosure verifies the first time-varying parameter to be verified and the first identifier to be verified. If the verification is successful, generating the second time-varying parameter may include the following steps A31 to A33.

[0074] Step A31: Determine whether the first time-varying parameter to be verified is equal to the first time-varying parameter and whether the first identifier to be verified is the same as the first device identifier.

[0075] Step A32: If the first time-varying parameter to be verified is equal to the first time-varying parameter, and the first identifier to be verified is the same as the first device identifier, then the verification is successful.

[0076] In this embodiment of the disclosure, if the first time-varying parameter to be verified is equal to the first time-varying parameter, and the first identifier to be verified is the same as the first device identifier, it indicates that the certification center generates the first certification data in response to the first time-varying parameter and the first device identifier, indicating that the certification center has passed the verification.

[0077] It should be noted that, except for the case where the first time-varying parameter to be verified is equal to the first time-varying parameter and the first identifier to be verified is the same as the first device identifier, all other cases will result in verification failure.

[0078] Step A33: If the verification passes, generate the second time-varying parameter.

[0079] In this embodiment of the disclosure, the first communication device generates a second time-varying parameter after successful verification. The second time-varying parameter may be a timestamp or a sequence number.

[0080] For example, in response to the successful verification of the first authentication data, hardware (such as a random number generator) configured on the first communication device that meets the requirements of cryptographic applications generates a second time-varying parameter.

[0081] This embodiment determines the correctness of the first authentication data by judging whether the first time-varying parameter to be verified is equal to the first time-varying parameter and whether the first identifier to be verified is the same as the first device identifier. The method is simple, highly accurate, and can save computing power. In addition, the two communicating parties do not need to share keys in advance, thereby reducing the difficulty of key management.

[0082] Step A4: Encrypt the second time-varying parameter and the first device identifier using the single authentication key to obtain the third data.

[0083] Step A5: Generate second authentication data based on the second challenge, second data, and third data.

[0084] In this embodiment, second authentication data is generated by encrypting the second challenge obtained from decrypting the first data, the second data included in the first authentication data, and the third data obtained by encrypting the second time-varying parameters and the first device identifier using a single authentication key. That is, the second authentication data includes data for authenticating the first communication device and data for authenticating the authentication center. Without requiring the second communication device to authenticate with the authentication center, this disclosure can directly achieve two-way authentication between the first and second communication devices, thereby improving authentication efficiency, reducing the burden on the authentication center, saving network resources, and enhancing the security and flexibility of the system.

[0085] It should be noted that this disclosure does not limit the method by which the second authentication data is generated based on the second challenge, the second data, and the third data. For example, the second challenge, the second data, and the third data can be concatenated together to obtain the second authentication data. Another example is obtaining the second authentication data by combining the second challenge, the second data, and the third data according to a combination rule. This disclosure does not limit the combination rule; for example, the second challenge, the second data, and the third data can be concatenated together, and a 4-digit number can be inserted at the beginning of the concatenated data.

[0086] In another exemplary embodiment, the third authentication data may include fourth data, which is obtained by encrypting the third time-varying parameter and the second device identifier with a single authentication key. The third time-varying parameter is generated by the second communication device, and the second device identifier is used to identify the first communication device. The verification of the third authentication data in the two-way authentication method provided in this disclosure, where the two-way authentication between the first and second communication devices is successful upon successful verification of the third authentication data, may include the following steps B1 and B2.

[0087] Step B1: Decrypt the fourth data according to the single authentication key to obtain the second decrypted data. The second decrypted data includes the second time-varying parameter to be verified and the second identifier to be verified.

[0088] In this embodiment of the disclosure, the second identifier to be verified is the device identifier obtained by decrypting the fourth data, and it corresponds to the second device identifier. The second time-varying parameter to be verified is the time-varying parameter obtained by decrypting the fourth data, and it corresponds to the third time-varying parameter generated by the second communication device.

[0089] Step B2: Verify the second time-varying parameter and the second identifier to be verified. If the verification is successful, the first communication device and the second communication device are successfully authenticated in both directions.

[0090] In one embodiment, the second time-varying parameter to be verified is the first timestamp; wherein, verifying the second time-varying parameter to be verified and the second identifier to be verified, and if the verification is successful, the first communication device and the second communication device achieve bidirectional authentication, which may include the following steps B21 to B25.

[0091] Step B21: Obtain the current timestamp and the second device identifier.

[0092] In this embodiment of the disclosure, a second device identifier is obtained, that is, the first communication device obtains its own identifier. For example, the identifier of the first communication device is I_A.

[0093] Step B22: Calculate the difference between the current timestamp and the second time-varying parameter to be verified to obtain the first duration.

[0094] Step B23: Determine whether the first duration is less than the first duration threshold and whether the second identifier to be verified is the same as the second device identifier.

[0095] In this embodiment of the disclosure, the first duration threshold can be set according to the actual application scenario and specific application experience. For example, the first duration threshold is any value between 10 seconds (s) and 15 minutes (min). As another example, the first duration threshold is any value among 10s, 1min, 2min, 3min, 5min, 10min, 12min, and 15min.

[0096] It should be noted that if the first duration is less than the first duration threshold, the timeliness requirement is met. In other words, when the second time-varying parameter to be verified is the first timestamp, the timeliness requirement is met if the second time-varying parameter to be verified and the current timestamp are within a certain time window.

[0097] Step B24: If the first duration is less than the first duration threshold and the second identifier to be verified is the same as the second device identifier, then the verification is successful.

[0098] It should be noted that, except for the case where the first duration is less than the first duration threshold and the second identifier to be verified is the same as the second device identifier, all other cases are considered verification failures.

[0099] Step B25: If the verification is successful, the first communication device and the second communication device successfully complete two-way authentication.

[0100] This embodiment verifies the second time-varying parameter and the second identifier to be verified using the current timestamp and the second device identifier. If the verification passes, the first and second communication devices achieve successful two-way authentication. Verifying the second time-varying parameter and the second identifier using the current timestamp and the second device identifier ensures more accurate and secure two-way authentication between communication devices, prevents spoofing and replay attacks, and improves the overall security of the system.

[0101] In another embodiment, the second time-varying parameter to be verified is the first sequence number; wherein, verifying the second time-varying parameter to be verified and the second identifier to be verified, and if the verification is successful, the first communication device and the second communication device are successfully authenticated in both directions, which may include the following steps B201 to B204.

[0102] Step B201: Obtain the first verification serial number and the second device identifier.

[0103] In this embodiment of the disclosure, the first communication device can maintain a sequence number variable for the second communication device, and obtain the sequence number variable (first verification sequence number) once each time the second time-varying parameter to be verified and the second identifier to be verified are verified.

[0104] Step B202: Determine whether the first sequence number is greater than the first verification sequence number and whether the second identifier to be verified is the same as the second device identifier.

[0105] Step B203: If the first serial number is greater than the first verification serial number, and the second identifier to be verified is the same as the second device identifier, then the verification is successful.

[0106] Step B204: If the verification is successful, the first communication device and the second communication device successfully complete two-way authentication.

[0107] This disclosure verifies the second time-varying parameter and the second identifier to be verified by using the first verification serial number and the second device identifier, which can ensure that the two-way authentication between communication devices is more accurate and secure, prevent spoofing and replay attacks, and improve the overall security of the system.

[0108] Based on the same inventive concept, this disclosure also provides a two-way authentication method, as described in the following embodiments. Since the principle by which this method solves the problem is similar to that of the above-described method embodiments, the implementation of this method embodiment can refer to the implementation of the above-described method embodiments, and repeated details will not be elaborated further.

[0109] Figure 3 A flowchart of a two-way authentication method according to another embodiment of this disclosure is shown, such as Figure 3 As shown, a second communication device is used, and a second physical unclonable function chip is installed on the second communication device. The two-way authentication method provided in this embodiment may include the following S301 to S303.

[0110] S301, receive second authentication data sent by the first communication device. The second authentication data is generated by the first communication device based on the first physical non-cloning function chip to verify the first authentication data, and is generated when the first authentication data passes the verification.

[0111] S302, based on the second physical non-cloning function chip, verifies the second authentication data, and generates the third authentication data if the second authentication data passes the verification.

[0112] S303, send third authentication data to the first communication device so that the first communication device can verify the third authentication data. If the third authentication data is verified, the first communication device and the second communication device successfully complete two-way authentication.

[0113] In this embodiment, the first communication device receives first authentication data and, if the first authentication data passes verification, generates second authentication data. The second communication device verifies the second authentication data, and, if the verification passes, generates third authentication data. The first communication device then verifies the third authentication data, and, if the third authentication data passes verification, completes the two-way authentication between the first and second communication devices. The first and second communication devices complete two-way authentication through multiple exchanges of authentication data, and this method achieves two-way authentication between the communicating parties without prior key sharing. It addresses the quantum computing threats faced by public-key cryptography, solves the problems of traditional symmetric key management using physically non-cloning functions, prevents communication devices from being impersonated, confirms the authenticity of the communication device's identity, and improves authentication security.

[0114] Furthermore, this disclosure verifies the first authentication data by using a first physically unclonable function chip, which can prevent attackers from stealing key information and provides higher security than using the same preset key for a long time.

[0115] The present disclosure will be further described below through exemplary embodiments.

[0116] In an exemplary embodiment, the second authentication data includes a second challenge, second data encrypted with a second response, and third data. The second response is the response data of the second communication device, and the second response corresponds to the second challenge. The third data is obtained by the first communication device encrypting a second time-varying parameter and a first device identifier using a single authentication key. The two-way authentication method provided in this disclosure, based on a second physically unclonable function chip, verifies the second authentication data. Generating the third authentication data upon successful verification of the second authentication data may include the following steps C1 to C6.

[0117] Step C1: Input the second challenge into the second physical non-cloning function chip and output the second response.

[0118] Step C2: Decrypt the second data according to the second response to obtain the third decrypted data. The third decrypted data includes the third time-varying parameter to be verified, the third identifier to be verified, and the single authentication key.

[0119] In this embodiment of the disclosure, the third identifier to be verified is a device identifier obtained by decrypting the second data, which corresponds to the second device identifier. The third time-varying parameter to be verified is a time-varying parameter obtained by decrypting the second data, which corresponds to the first time-varying parameter.

[0120] Step C3: Decrypt the third data using the single authentication key to obtain the fourth decrypted data. The fourth decrypted data includes the fourth time-varying parameter to be verified and the fourth identifier to be verified.

[0121] In this embodiment of the disclosure, the fourth identifier to be verified is a device identifier obtained by decrypting the third data, which corresponds to the first device identifier. The third time-varying parameter to be verified is a time-varying parameter obtained by decrypting the third data, which corresponds to the second time-varying parameter.

[0122] Step C4: Verify the third time-varying parameter to be verified, the third time-varying identifier to be verified, the fourth time-varying parameter to be verified, and the fourth time-varying identifier to be verified. If the verification is successful, generate the third time-varying parameter.

[0123] In one embodiment, the third time-varying parameter to be verified is the second timestamp, and the fourth time-varying parameter to be verified is the third timestamp; wherein, verifying the third time-varying parameter to be verified, the third verification identifier, the fourth time-varying parameter to be verified, and the fourth verification identifier, and generating the third time-varying parameter if the verification is successful, may include the following steps C41 to C46.

[0124] Step C41: Obtain the current timestamp, the second device identifier, and the first device identifier.

[0125] It should be noted that when the second communication device receives the second authentication data sent by the first communication device, it can obtain the device identifier of the first communication device (i.e., the second device identifier). The second communication device can also obtain its own device identifier (i.e., the first device identifier).

[0126] Step C42: Calculate the difference between the current timestamp and the second timestamp to obtain the second duration.

[0127] Step C43: Calculate the difference between the current timestamp and the third timestamp to obtain the third duration.

[0128] Step C44: Determine whether the second duration is less than the second duration threshold, whether the third duration is less than the third duration threshold, whether the third identifier to be verified is the same as the second device identifier, and whether the fourth identifier to be verified is the same as the first device identifier.

[0129] It should be noted that both the second and third duration thresholds can be set according to the actual application scenario and specific application experience.

[0130] Step C45: If the second duration is less than the second duration threshold, the third duration is less than the third duration threshold, the third identifier to be verified is the same as the second device identifier, and the fourth identifier to be verified is the same as the first device identifier, then the verification is successful.

[0131] In this embodiment of the disclosure, except for the cases where the second duration is less than the second duration threshold, the third duration is less than the third duration threshold, the third identifier to be verified is the same as the second device identifier, and the fourth identifier to be verified is the same as the first device identifier, all other cases indicate that the verification fails.

[0132] Step C46: If the verification passes, generate the third time-varying parameter.

[0133] The embodiments disclosed herein verify the third time-varying parameter to be verified, the third time-varying identifier to be verified, the fourth time-varying parameter to be verified, and the fourth time-varying identifier to be verified by using the current timestamp, the second device identifier, and the first device identifier. This ensures that the two-way authentication between communication devices is more accurate and secure, prevents spoofing and replay attacks, and improves the overall security of the system.

[0134] In another embodiment, the third time-varying parameter to be verified is the second sequence number, and the fourth time-varying parameter to be verified is the third sequence number; wherein, verifying the third time-varying parameter to be verified, the third verification identifier, the fourth time-varying parameter to be verified, and the fourth verification identifier, and generating the third time-varying parameter if the verification is successful, may include the following steps C401 to C404.

[0135] Step C401: Obtain the second verification serial number, the third verification serial number, the second device identifier, and the first device identifier.

[0136] For example, the second communication device may maintain a sequence number variable for the authentication center (such as the second verification sequence number, denoted as N_P) and another sequence number variable for the first communication device (such as the third verification sequence number, denoted as N_A).

[0137] Step C402: Determine whether the second serial number is greater than the second verification serial number, whether the third serial number is greater than the third verification serial number, whether the third identifier to be verified is the same as the second device identifier, and whether the fourth identifier to be verified is the same as the first device identifier.

[0138] For example, the second sequence number is denoted as TN_P and the third sequence number is denoted as TN_A. If TN_P is greater than N_P and TN_A is greater than N_A, then it is considered valid (correct).

[0139] Step C403: If the second serial number is greater than the second verification serial number, the third serial number is greater than the third verification serial number, the third identifier to be verified is the same as the second device identifier, and the fourth identifier to be verified is the same as the first device identifier, then the verification is successful.

[0140] In this embodiment of the disclosure, except for the cases where the second sequence number is greater than the second verification sequence number, the third sequence number is greater than the third verification sequence number, the third identifier to be verified is the same as the second device identifier, and the fourth identifier to be verified is the same as the first device identifier, all other cases indicate that the verification fails.

[0141] Step C404: If the verification passes, generate the third time-varying parameter.

[0142] This disclosure verifies the third time-varying parameter to be verified, the third identifier to be verified, the fourth time-varying parameter to be verified, and the fourth identifier to be verified by using the second verification serial number, the third verification serial number, the second device identifier, and the first device identifier. This ensures that the two-way authentication between communication devices is more accurate and secure, prevents spoofing and replay attacks, and improves the overall security of the system.

[0143] Step C5: Obtain the second device identifier, which is used to identify the first communication device.

[0144] Step C6: Encrypt the third time-varying parameter and the second device identifier using the single authentication key to generate the third authentication data.

[0145] This disclosure addresses the quantum computing threats faced by public-key cryptography, utilizes PUF chips to solve the problems of traditional symmetric key management, and can prevent communication devices from being spoofed, verifying the authenticity of the communication device's identity. This disclosure is applicable to scenarios where two-way communication requires bidirectional authentication. Provided both parties have built-in PUF chips and are registered with an authentication center, bidirectional authentication is performed through the authentication center and based on the response value of the PUF chip, without the need for prior pre-sharing of the symmetric key.

[0146] In other words, both communicating parties use the response value of the PUF chip as the key needed to generate partial authentication data and protect the single-authentication key with the authentication center. This, combined with the single-authentication key generated by the authentication center, enables two-way authentication between the two parties. The parties do not need to share keys beforehand; instead, they have built-in PUF chips and register with the authentication center in advance, recording several challenge-response pairs in the center's response database. When two-way authentication is required, one party requests a single-authentication key from the authentication center. The authentication center uses each party's respective PUF response value to protect the single-authentication key. After receiving the authentication data, the communicating party uses its PUF chip to generate a response, decrypts it to obtain the single-authentication key, and then uses this information to generate and verify the authentication data. Each authentication uses a different PUF response as the key to protect the single-authentication key, achieving "one key for one authentication."

[0147] Based on the same inventive concept, this disclosure also provides a two-way authentication method, as described in the following embodiments. Since the principle by which this method solves the problem is similar to that of the above-described method embodiments, the implementation of this method embodiment can refer to the implementation of the above-described method embodiments, and repeated details will not be elaborated further.

[0148] Figure 4 A flowchart of a two-way authentication method in another embodiment of this disclosure is shown, as follows: Figure 4 As shown, the application authentication center, the two-way authentication method provided in this embodiment may include the following S401 to S403.

[0149] S401, receive the first time-varying parameter and the first device identifier sent by the first communication device, the first device identifier being used to identify the second communication device.

[0150] S402, Generate first authentication data based on the first time-varying parameter and the first device identifier.

[0151] In this embodiment of the disclosure, the authentication center stores multiple challenge-response pairs of the first communication device and multiple challenge-response pairs of the second communication device.

[0152] For example, the communication device pre-registers with the certification authority, and the certification authority's response database maintains the challenge-response pairs of the communication device. The challenge-response pairs of the communication device are shown in Table 1 below.

[0153] Table 1 Challenge Response of Communication Equipment

[0154]

[0155] In Table 1, N represents an integer greater than or equal to 2. C represents the challenge, and R represents the response (also known as the response value).

[0156] In one embodiment, the two-way authentication method provided in this disclosure may include the following steps D1 to D7 in generating first authentication data based on first time-varying parameters and first device identifier.

[0157] Step D1: In response to the first time-varying parameter and the first device identifier sent by the first communication device, a single authentication key is generated.

[0158] Step D2: Obtain a first challenge-response pair from a plurality of challenge-response pairs stored in the first communication device. The first challenge-response pair includes a first challenge and a first response.

[0159] In this embodiment of the disclosure, the authentication center stores multiple challenge-response pairs of first communication devices and multiple challenge-response pairs of second communication devices. In response to a first time-varying parameter and a first device identifier sent by a first communication device, the authentication center randomly generates a single authentication key. For example, a random number generator on the authentication center randomly generates the single authentication key.

[0160] Step D3: Obtain a second challenge-response pair from a plurality of challenge-response pairs stored in the second communication device. The second challenge-response pair includes a second challenge and a second response.

[0161] Step D4: Encrypt the first time-varying parameter, the single authentication key, the first device identifier, and the second challenge based on the first response to obtain the first data.

[0162] Step D5: Obtain the fourth time-varying parameter and the second device identifier. The second device identifier is the user identifier and the first communication device.

[0163] Step D6: Encrypt the fourth time-varying parameter, the single authentication key, and the second device identifier according to the second response to obtain the second data.

[0164] Step D7: Generate the first authentication data based on the first challenge, the first data, and the second data.

[0165] S403, send the first authentication data to the first communication device.

[0166] In this embodiment, the first authentication data includes a first challenge, first data, and second data. This facilitates the first communication device's verification of the first authentication data using a PUF chip and the generation of second authentication data based on the first authentication data. The second communication device then verifies the second authentication data using the PUF chip to generate third authentication data. The first communication device then verifies the third authentication data. If the verification is successful, bidirectional authentication between the first and second communication devices can be completed. The first and second communication devices complete bidirectional authentication through multiple exchanges of authentication data, and bidirectional authentication between the communicating parties can be achieved without prior key sharing. This addresses the quantum computing threats faced by public-key cryptography, solves the problems of traditional symmetric key management using physically non-cloning functions, prevents communication devices from being impersonated, confirms the authenticity of the communication device's identity, and improves authentication security.

[0167] The present disclosure will now be described through a specific embodiment.

[0168] In one embodiment, such as Figure 5 As shown, the first communication device is communication device A. The second communication device is communication device B. The authentication center is represented by authentication center P. The two-way authentication method provided in this disclosure may include the following steps S501 to S513.

[0169] S501, communication device A sends TNR_A (first time-varying parameter) and I_B (first device identifier) ​​to authentication center P. It should be noted that communication device A generates and sends TNR_A and I_B to authentication center P, where I_B is the identifier of communication device B. TNR_A can be a timestamp, sequence number, or random number, and must be unique, used to associate communication device A with authentication center P.

[0170] S502, the authentication center P generates K_AB (single authentication key), and generates Token_PA (first authentication data) based on K_AB, TNR_A, I_B, I_A (second device identifier), TN_P (fourth time-varying parameter), (C_A1, R_A1), and (C_B1, R_B1). Among them, (C_A1, R_A1) is the first challenge-response pair, and (C_B1, R_B1) is the second challenge-response pair.

[0171] S503, the authentication center P sends Token_PA to the communication device A.

[0172] For example, in response to TNR_A and I_B sent by communication device A, authentication center P generates K_AB. It selects a PUF challenge-response pair (C_A1, R_A1) from communication device A and a PUF challenge-response pair (C_B1, R_B1) from communication device B, generates first authentication data Token_PA=C_A1||E(R_A1, TNR_A||K_AB||I_B||C_B1)||E(R_B1, TN_P||K_AB||I_A) and sends it to communication device A, where E(K, M) represents symmetric encryption of plaintext M using key K, and TN_P can be a timestamp or sequence number.

[0173] S504, communication device A uses the PUF chip to generate the response R_A1 corresponding to C_A1, and uses R_A1 to decrypt E (R_A1, TNR_A||K_AB||I_B||C_B1) to obtain TNR_A, K_AB, I_B and C_B1.

[0174] S505, Communication device A verifies the correctness of the decrypted TNR_A and I_B.

[0175] S506, if the verification is successful, communication device A generates Token_AB (second authentication data).

[0176] S507, Communication device A sends Token_AB to communication device B.

[0177] For example, after receiving Token_PA, communication device A uses its PUF chip to generate a response R_A1 corresponding to C_A1. It uses R_A1 to decrypt E(R_A1, TNR_A||K_AB||I_B||C_B1) to obtain TNR_A||K_AB||I_B||C_B1. It verifies whether the decrypted TNR_A matches the first time-varying parameter sent by S501 to the authentication center P, and checks the correctness of the decrypted I_B, thereby verifying Token_PA. Based on K_AB and C_B1, it constructs Token_AB=C_B1||E(R_B1, TN_P||K_AB||I_A)||E(K_AB, TN_A||I_B) and sends it to communication device B.

[0178] S508, communication device B uses the PUF chip to generate the response R_B1 corresponding to C_B1, and uses R_B1 to decrypt E (R_B1, TN_P||K_AB||I_A) to obtain TN_P, K_AB and I_A.

[0179] S509, Communication device B uses K_AB to decrypt E(K_AB, TN_A||I_B) to obtain TN_A and I_B.

[0180] S510, Communication device B verifies the correctness of the decrypted TN_P, I_A, TN_A, and I_B. It should be noted that the verification process for the correctness of the decrypted TN_P, I_A, TN_A, and I_B has already been explained in steps C1 to C6 above, and will not be repeated here.

[0181] S511, if the verification is successful, communication device B generates Token_BA (third authentication data).

[0182] S512, Communication device B sends Token_BA to communication device A.

[0183] For example, after receiving Token_AB, communication device B uses its PUF chip to generate a response R_B1 corresponding to C_B1, uses R_B1 to decrypt E(R_B1, TN_P||K_AB||I_A) to obtain TN_P||K_AB||I_A, uses K_AB to decrypt E(K_AB, TN_A||I_B) to obtain TN_A||I_B, verifies the correctness of TN_P, I_A, TN_A, and I_B, thereby verifying the correctness of Token_AB. If the verification is successful, it constructs third authentication data Token_BA=E(K_AB, TN_B||I_A) based on K_AB and sends Token_BA to communication device A.

[0184] S513, communication device A uses K_AB to decrypt E(K_AB, TN_B||I_A) to obtain TN_B and I_A. The correctness of the decrypted TN_B and I_A is verified. If the verification passes, the two-way authentication between communication device A and communication device B is successful.

[0185] For example, after receiving Token_BA, communication device A uses K_AB to decrypt E(K_AB, TN_B||I_A) to obtain TN_B||I_A, verifies the correctness of TN_B||I_A, and thus verifies Token_BA. If the verification is successful, communication device A and communication device B successfully complete two-way authentication.

[0186] The authentication based on the PUF chip in this disclosure is mainly used to realize the authentication of communication devices to the central platform. This disclosure uses the PUF chip to solve the key synchronization and update problem between the communication party and the authentication center, thereby realizing two-way authentication between the two communication parties, both of which have built-in PUF chips. Moreover, each authentication uses a new authentication key, which improves the security of the two-way authentication process.

[0187] This disclosure addresses the quantum computing threats faced by public-key cryptography, utilizes PUF to solve the problems of traditional symmetric key management, and prevents communication devices from being spoofed, verifying the authenticity of the communication device's identity. This disclosure is applicable to scenarios where two-way communication requires bidirectional authentication. Provided both parties have built-in PUF chips and are registered with an authentication center, bidirectional authentication is performed through the authentication center and based on the PUF's response value, without the need for prior pre-sharing of the symmetric key.

[0188] Furthermore, both communicating parties perform two-way authentication by using an authentication center and a PUF-based response value to protect the single authentication key. The parties do not need to specifically authenticate the authentication center; instead, it is implicitly integrated into the authentication data verification process, making the authentication center's process relatively simple.

[0189] This disclosure can replace the use of asymmetric cryptography (such as digital certificates) for identity authentication. Under the premise of using symmetric cryptography, the two communicating parties in this disclosure embodiment register with the authentication center through their respective PUF chips, and can subsequently achieve authentication between the two parties with the help of the authentication center.

[0190] For example, a company has multiple office locations and has set up private network communication. The security gateways at each location need to be authenticated to ensure the security of communication. Based on the two-way authentication method disclosed herein, authentication between each location can be achieved without configuring corresponding symmetric keys for each location.

[0191] For example, QKD devices are paired up to form a transmit-receive network. Each QKD device establishes a connection with the QKD network controller (authentication center) to achieve authentication between the two devices.

[0192] This "central-point" approach simplifies key management. Even if a communication device needs to be replaced, it only needs to be re-registered with the certification center, without needing to synchronously modify or adjust other devices that need to communicate with it.

[0193] Based on the same inventive concept, this disclosure also provides a two-way authentication device, as described in the following embodiments. Since the principle by which this device embodiment solves the problem is similar to that of the above-described method embodiment, the implementation of this device embodiment can refer to the implementation of the above-described method embodiment, and repeated details will not be elaborated further.

[0194] Figure 6 A schematic diagram of a two-way authentication device according to an embodiment of this disclosure is shown, such as... Figure 6As shown, an application is made to a first communication device, which is equipped with a first physically unclonable function chip. The device includes a first transmitting module 61, a first receiving module 62, and a first verification module 63. The first transmitting module 61 can send a first time-varying parameter and a first device identifier to an authentication center. The first device identifier identifies the second communication device, enabling the authentication center to generate first authentication data based on the first time-varying parameter and the first device identifier. The first receiving module 62 can receive the first authentication data. The first verification module 63 can verify the first authentication data based on the first physically unclonable function chip. If the first authentication data passes verification, it generates second authentication data. The first transmitting module 61 can also send the second authentication data to the second communication device, enabling the second communication device to verify the second authentication data. If the second authentication data passes verification, it generates third authentication data. The first receiving module 62 can also receive the third authentication data. The first verification module 63 can also verify the third authentication data. If the third authentication data passes verification, the first communication device and the second communication device achieve successful bidirectional authentication.

[0195] In one embodiment, the first authentication data includes a first challenge, first data encrypted with a first response, and second data encrypted with a second response. The first response is the response data of a first communication device, corresponding to the first challenge. The second response is the response data of a second communication device. The first verification module 63 can also be used to input the first challenge into a first physically unclonable function chip and output the first response; decrypt the first data according to the first response to obtain first decrypted data, which includes a second challenge, a one-time authentication key, a first time-varying parameter to be verified, and a first identifier to be verified; verify the first time-varying parameter to be verified and the first identifier to be verified, and generate a second time-varying parameter if the verification is successful; encrypt the second time-varying parameter and the first device identifier according to the one-time authentication key to obtain third data; and generate second authentication data according to the second challenge, the second data, and the third data.

[0196] In one embodiment, the first verification module 63 can also be used to determine whether the first time-varying parameter to be verified is equal to the first time-varying parameter and whether the first identifier to be verified is the same as the first device identifier; if the first time-varying parameter to be verified is equal to the first time-varying parameter and the first identifier to be verified is the same as the first device identifier, then the verification is successful; if the verification is successful, the second time-varying parameter is generated.

[0197] In one embodiment, the third authentication data includes fourth data, which is obtained by encrypting the third time-varying parameter and the second device identifier with a single authentication key. The third time-varying parameter is generated by the second communication device, and the second device identifier is used to identify the first communication device. The first verification module 63 can also be used to decrypt the fourth data according to the single authentication key to obtain second decrypted data, which includes the second time-varying parameter to be verified and the second identifier to be verified. The second time-varying parameter to be verified and the second identifier to be verified are verified. If the verification is successful, the first communication device and the second communication device successfully complete bidirectional authentication.

[0198] In one embodiment, the second time-varying parameter to be verified is the first timestamp; the first verification module 63 can also be used to obtain the current timestamp and the second device identifier; calculate the difference between the current timestamp and the second time-varying parameter to be verified to obtain the first duration; determine whether the first duration is less than the first duration threshold and whether the second identifier to be verified is the same as the second device identifier; if the first duration is less than the first duration threshold and the second identifier to be verified is the same as the second device identifier, then the verification is successful; if the verification is successful, the first communication device and the second communication device successfully authenticate each other.

[0199] In one embodiment, the second time-varying parameter to be verified is the first serial number; the first verification module 63 can also be used to obtain the first verification serial number and the second device identifier; determine whether the first serial number is greater than the first verification serial number and whether the second identifier to be verified is the same as the second device identifier; if the first serial number is greater than the first verification serial number and the second identifier to be verified is the same as the second device identifier, then the verification is successful; if the verification is successful, the first communication device and the second communication device are successfully authenticated in both directions.

[0200] Figure 7 A schematic diagram of a two-way authentication device according to another embodiment of this disclosure is shown, such as... Figure 7 As shown, an application is made to a second communication device, which is equipped with a second physical non-cloning function chip. The device includes a second receiving module 71, a second verification module 72, and a second sending module 73. The second receiving module 71 can be used to receive second authentication data sent by the first communication device. The second authentication data is generated by the first communication device verifying the first authentication data based on the first physical non-cloning function chip, provided that the first authentication data has passed verification. The second verification module 72 can be used to verify the second authentication data based on the second physical non-cloning function chip, and generate third authentication data if the second authentication data has passed verification. The second sending module 73 can be used to send the third authentication data to the first communication device, so that the first communication device can verify the third authentication data. If the third authentication data has passed verification, the two-way authentication between the first and second communication devices is successful.

[0201] In one embodiment, the second authentication data includes a second challenge, second data encrypted with a second response, and third data. The second response is the response data of the second communication device, and the second response corresponds to the second challenge. The third data is obtained by the first communication device encrypting the second time-varying parameter and the first device identifier using a single authentication key. The second verification module 72 can also be used to input the second challenge into the second physically unclonable function chip and output the second response; decrypt the second data according to the second response to obtain the third decrypted data, which includes the third time-varying parameter to be verified, the third identifier to be verified, and the single authentication key; decrypt the third data according to the single authentication key to obtain the fourth decrypted data, which includes the fourth time-varying parameter to be verified and the fourth identifier to be verified; verify the third time-varying parameter to be verified, the third identifier to be verified, the fourth time-varying parameter to be verified, and the fourth identifier to be verified, and generate the third time-varying parameter if the verification is successful; obtain the second device identifier, which is used to identify the first communication device; encrypt the third time-varying parameter and the second device identifier according to the single authentication key to generate the third authentication data.

[0202] In one embodiment, the third time-varying parameter to be verified is the second timestamp, and the fourth time-varying parameter to be verified is the third timestamp; the second verification module 72 can also be used to obtain the current timestamp, the second device identifier, and the first device identifier; calculate the difference between the current timestamp and the second timestamp to obtain the second duration; calculate the difference between the current timestamp and the third timestamp to obtain the third duration; determine whether the second duration is less than the second duration threshold, whether the third duration is less than the third duration threshold, whether the third identifier to be verified is the same as the second device identifier, and whether the fourth identifier to be verified is the same as the first device identifier; if the second duration is less than the second duration threshold, the third duration is less than the third duration threshold, the third identifier to be verified is the same as the second device identifier, and the fourth identifier to be verified is the same as the first device identifier, then the verification is successful; if the verification is successful, the third time-varying parameter is generated.

[0203] In one embodiment, the third time-varying parameter to be verified is the second sequence number, and the fourth time-varying parameter to be verified is the third sequence number; the second verification module 72 can also be used to obtain the second verification sequence number, the third verification sequence number, the second device identifier, and the first device identifier; determine whether the second sequence number is greater than the second verification sequence number, whether the third sequence number is greater than the third verification sequence number, whether the third identifier to be verified is the same as the second device identifier, and whether the fourth identifier to be verified is the same as the first device identifier; if the second sequence number is greater than the second verification sequence number, the third sequence number is greater than the third verification sequence number, the third identifier to be verified is the same as the second device identifier, and the fourth identifier to be verified is the same as the first device identifier, then the verification is successful; if the verification is successful, the third time-varying parameter is generated.

[0204] Figure 8A schematic diagram of a two-way authentication device in another embodiment of this disclosure is shown, such as... Figure 8 As shown, the device, applied to an authentication center, may include: a third receiving module 81, a generating module 82, and a third sending module 83. The third receiving module 81 can be used to receive a first time-varying parameter and a first device identifier sent by a first communication device, the first device identifier being used to identify a second communication device; the generating module 82 can be used to generate first authentication data based on the first time-varying parameter and the first device identifier; the third sending module 83 can be used to send the first authentication data to the first communication device.

[0205] In one embodiment, the authentication center stores multiple challenge-response pairs of a first communication device and multiple challenge-response pairs of a second communication device; the third sending module 83 can also be used to generate a single authentication key in response to a first time-varying parameter and a first device identifier sent by the first communication device; obtain a first challenge-response pair from the stored multiple challenge-response pairs of the first communication device, the first challenge-response pair including a first challenge and a first response; obtain a second challenge-response pair from the stored multiple challenge-response pairs of the second communication device, the second challenge-response pair including a second challenge and a second response; encrypt the first time-varying parameter, the single authentication key, the first device identifier, and the second challenge according to the first response to obtain first data; obtain a fourth time-varying parameter and a second device identifier, the second device identifier being the user identifier of the first communication device; encrypt the fourth time-varying parameter, the single authentication key, and the second device identifier according to the second response to obtain second data; generate first authentication data based on the first challenge, the first data, and the second data.

[0206] The two-way authentication device disclosed herein can address the quantum computing threat faced by public-key cryptography, solve the problem of traditional symmetric key management by using physically unclonable functions, prevent communication devices from being counterfeited, verify the authenticity of the communication device's identity, and improve the security of authentication.

[0207] It should be noted that the examples and application scenarios implemented by the modules in the above device embodiments and the corresponding steps in the method embodiments are the same, but are not limited to the content disclosed in the above method embodiments. It should also be noted that the above modules, as part of the device, can be executed in a computer system such as a set of computer-executable instructions.

[0208] Those skilled in the art will understand that various aspects of this disclosure can be implemented in the following forms: a completely hardware implementation, a completely software implementation (including firmware, microcode, etc.), or a combination of hardware and software implementations, which can be collectively referred to herein as a "circuit", "module" or "system".

[0209] Based on the same inventive concept, this disclosure also provides an electronic device, which includes: a processor; and a memory for storing executable instructions of the processor; wherein the processor is configured to execute the bidirectional authentication method described above by executing the executable instructions. Since the principle by which this electronic device embodiment solves the problem is similar to that of the above method embodiment, the implementation of this electronic device embodiment can refer to the implementation of the above method embodiment, and repeated details will not be described again.

[0210] The following reference Figure 9 To describe an electronic device 900 according to such an embodiment of the present disclosure. Figure 9 The electronic device 900 shown is merely an example and should not impose any limitation on the functionality and scope of use of the embodiments disclosed herein.

[0211] like Figure 9 As shown, the electronic device 900 is manifested in the form of a general-purpose computing device. The components of the electronic device 900 may include, but are not limited to: at least one processing unit 910, at least one storage unit 920, and a bus 930 connecting different system components (including storage unit 920 and processing unit 910).

[0212] The storage unit stores program code that can be executed by the processing unit 910, causing the processing unit 910 to perform the steps described in the "Exemplary Methods" section above according to various exemplary embodiments of this disclosure.

[0213] Storage unit 920 may include readable media in the form of volatile storage units, such as random access memory (RAM) 9201 and / or cache memory 9202, and may further include read-only memory (ROM) 9203.

[0214] The storage unit 920 may also include a program / utility 9204 having a set (at least one) program module 9205, such program module 9205 including but not limited to: an operating system, one or more application programs, other program modules and program data, each or some combination of these examples may include an implementation of a network environment.

[0215] Bus 930 can represent one or more of several types of bus structures, including a memory cell bus or memory cell controller, a peripheral bus, a graphics acceleration port, a processing unit, or a local bus using any of the various bus structures.

[0216] Electronic device 900 can also communicate with one or more external devices 940 (e.g., keyboard, pointing device, Bluetooth device, etc.), and with one or more devices that enable a user to interact with electronic device 900, and / or with any device that enables electronic device 900 to communicate with one or more other computing devices (e.g., router, modem, etc.). This communication can be performed via input / output (I / O) interface 950. Furthermore, electronic device 900 can also communicate with one or more networks (e.g., local area network (LAN), wide area network (WAN), and / or public networks, such as the Internet) via network adapter 960. As shown, network adapter 960 communicates with other modules of electronic device 900 via bus 930. It should be understood that, although not shown in the figures, other hardware and / or software modules can be used in conjunction with electronic device 900, including but not limited to: microcode, device drivers, redundant processing units, external disk drive arrays, RAID systems, tape drives, and data backup storage systems.

[0217] From the above description of the embodiments, those skilled in the art will readily understand that the exemplary embodiments described herein can be implemented by software or by combining software with necessary hardware. Therefore, the technical solutions according to the embodiments of this disclosure can be embodied in the form of a software product, which can be stored in a non-volatile storage medium (such as a CD-ROM, USB flash drive, external hard drive, etc.) or on a network, including several instructions to cause a computing device (such as a personal computer, server, terminal device, or network device, etc.) to execute the methods according to the embodiments of this disclosure.

[0218] Based on the same inventive concept, in the disclosed exemplary embodiments, a computer-readable storage medium is also provided, which may be a readable signal medium or a readable storage medium. A program product capable of implementing the methods described above is stored thereon.

[0219] More specific examples of computer-readable storage media in this disclosure may include, but are not limited to: electrical connections having one or more wires, portable computer disks, hard disks, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fiber, portable compact disk read-only memory (CD-ROM), optical storage devices, magnetic storage devices, or any suitable combination of the foregoing.

[0220] In this disclosure, a computer-readable storage medium may include a data signal propagated in baseband or as part of a carrier wave, carrying readable program code. Such propagated data signals may take various forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination thereof. A readable signal medium may also be any readable medium other than a readable storage medium, capable of transmitting, propagating, or transmitting a program for use by or in connection with an instruction execution system, apparatus, or device.

[0221] In practical implementation, program code for performing the operations of this disclosure can be written in any combination of one or more programming languages, including object-oriented programming languages ​​such as Java and C++, and conventional procedural programming languages ​​such as C or similar languages. The program code can execute entirely on the user's computing device, partially on the user's device, as a standalone software package, partially on the user's computing device and partially on a remote computing device, or entirely on a remote computing device or server. In cases involving remote computing devices, the remote computing device can be connected to the user's computing device via any type of network, including a local area network (LAN) or a wide area network (WAN), or it can be connected to an external computing device (e.g., via the Internet using an Internet service provider).

[0222] Based on the same inventive concept, this disclosure also provides a computer program product, comprising: a computer program or instructions, wherein the computer program or instructions, when executed by a processor, implement the two-way authentication method of any one of the above method embodiments. Since the principle by which this computer program product embodiment solves the problem is similar to that of the above method embodiments, the implementation of this computer program product embodiment can refer to the implementation of the above method embodiments, and repeated details will not be elaborated further.

[0223] It should be noted that although several modules or units for the device used to perform actions have been mentioned in the detailed description above, this division is not mandatory. In fact, according to embodiments of this disclosure, the features and functions of two or more modules or units described above can be embodied in one module or unit. Conversely, the features and functions of one module or unit described above can be further divided and embodied by multiple modules or units.

[0224] Furthermore, although the steps of the method in this disclosure are described in a specific order in the accompanying drawings, this does not require or imply that the steps must be performed in that specific order, or that all the steps shown must be performed to achieve the desired result. Additional or alternative steps may be omitted, multiple steps may be combined into one step, and / or a step may be broken down into multiple steps.

[0225] Other embodiments of this disclosure will readily occur to those skilled in the art upon consideration of the specification and practice of the invention disclosed herein. This disclosure is intended to cover any variations, uses, or adaptations of this disclosure that follow the general principles of this disclosure and include common knowledge or customary techniques in the art not disclosed herein. The specification and examples are to be considered exemplary only, and the true scope and spirit of this disclosure are indicated by the appended claims.

Claims

1. A two-way authentication method, characterized by, The application is applied to a first communication device, wherein a first physical unclonable function chip is installed on the first communication device, and the first communication device comprises: sending a first time-varying parameter and a first device identifier to an authentication center, the first device identifier being used to identify a second communication device, so that the authentication center generates first authentication data according to the first time-varying parameter and the first device identifier, the first authentication data comprising a first challenge, first data encrypted by a first response, and second data encrypted by a second response, the first response being response data of the first communication device, the first response corresponding to the first challenge, and the second response being response data of the second communication device; receiving the first authentication data; verifying the first authentication data based on the first physical unclonable function chip, and generating second authentication data in the case that the first authentication data is verified; sending the second authentication data to the second communication device, so that the second communication device verifies the second authentication data and generates third authentication data in the case that the second authentication data is verified; receiving the third authentication data; verifying the third authentication data, and successfully performing bidirectional authentication between the first communication device and the second communication device in the case that the third authentication data is verified; wherein the verifying the first authentication data based on the first physical unclonable function chip and the generating second authentication data in the case that the first authentication data is verified comprise: inputting the first challenge into the first physical unclonable function chip to output the first response; decrypting the first data according to the first response to obtain first decryption data, the first decryption data comprising a second challenge, a single authentication key, a first to-be-verified time-varying parameter, and a first to-be-verified identifier; verifying the first to-be-verified time-varying parameter and the first to-be-verified identifier, and generating a second time-varying parameter in the case that the verification is passed; encrypting the second time-varying parameter and the first device identifier according to the single authentication key to obtain third data; and generating the second authentication data according to the second challenge, the second data, and the third data.

2. The bidirectional authentication method of claim 1, wherein, the verifying the first to-be-verified time-varying parameter and the first to-be-verified identifier, and the generating a second time-varying parameter in the case that the verification is passed comprise: judging whether the first to-be-verified time-varying parameter is equal to the first time-varying parameter and whether the first to-be-verified identifier is identical to the first device identifier; if the first to-be-verified time-varying parameter is equal to the first time-varying parameter and the first to-be-verified identifier is identical to the first device identifier, the verification is passed; generating the second time-varying parameter in the case that the verification is passed.

3. The two-way authentication method of claim 1, wherein, the third authentication data comprises fourth data, the fourth data being encrypted by the single authentication key from a third time-varying parameter and a second device identifier, the third time-varying parameter being generated by the second communication device, and the second device identifier being used to identify the first communication device; The third authentication data is verified, and in a case where the third authentication data is verified successfully, the first communication device and the second communication device are successfully authenticated bidirectionally. The fourth data is decrypted according to the single-time authentication key, to obtain second decryption data, the second decryption data comprising a second to-be-verified time-varying parameter and a second to-be-verified identifier; The second to-be-verified time-varying parameter and the second to-be-verified identifier are verified, and in a case where the verification is passed, the first communication device and the second communication device are successfully authenticated bidirectionally.

4. The bidirectional authentication method of claim 3, wherein, The second to-be-verified time-varying parameter is a first time stamp. The second to-be-verified time-varying parameter and the second to-be-verified identifier are verified, and in a case where the verification is passed, the first communication device and the second communication device are successfully authenticated bidirectionally. A current time stamp and the second device identifier are obtained. A difference between the current time stamp and the second to-be-verified time-varying parameter is calculated, to obtain a first time length. It is determined whether the first time length is less than a first time length threshold and whether the second to-be-verified identifier is identical to the second device identifier. If the first time length is less than the first time length threshold and the second to-be-verified identifier is identical to the second device identifier, the verification is passed. In a case where the verification is passed, the first communication device and the second communication device are successfully authenticated bidirectionally.

5. The bidirectional authentication method of claim 3, wherein, The second to-be-verified time-varying parameter is a first serial number. The second to-be-verified time-varying parameter and the second to-be-verified identifier are verified, and in a case where the verification is passed, the first communication device and the second communication device are successfully authenticated bidirectionally. A first verification serial number and the second device identifier are obtained. It is determined whether the first serial number is greater than the first verification serial number and whether the second to-be-verified identifier is identical to the second device identifier. If the first serial number is greater than the first verification serial number and the second to-be-verified identifier is identical to the second device identifier, the verification is passed. In a case where the verification is passed, the first communication device and the second communication device are successfully authenticated bidirectionally.

6. A two-way authentication method, characterized by, The second communication device is applied to, and a second physically unclonable function chip is installed on the second communication device, comprising: Receiving second authentication data sent by a first communication device, the second authentication data being generated by the first communication device based on a first physically unclonable function chip, in a case where first authentication data is verified successfully, the first authentication data comprising a first challenge, first data encrypted by a first response, and second data encrypted by a second response, the first response being response data of the first communication device, the first response corresponding to the first challenge, the second response being response data of the second communication device; Verifying the second authentication data based on the second physically unclonable function chip, and generating third authentication data in a case where the second authentication data is verified successfully; sending the third authentication data to the first communication device, so that the first communication device verifies the third authentication data, and in a case where the third authentication data is verified, the first communication device and the second communication device successfully perform mutual authentication; The first communication device generates second authentication data, including: inputting the first challenge into the first physically unclonable function chip to output the first response; decrypting the first data according to the first response to obtain first decrypted data, the first decrypted data including a second challenge, a one-time authentication key, a first to-be-verified time-varying parameter, and a first to-be-verified identifier; verifying the first to-be-verified time-varying parameter and the first to-be-verified identifier, and in a case where the verification is passed, generating a second time-varying parameter; encrypting the second time-varying parameter and a first device identifier according to the one-time authentication key to obtain third data; and generating the second authentication data according to the second challenge, the second data, and the third data.

7. The two-way authentication method of claim 6, wherein, The second authentication data includes a second challenge, second response encrypted second data, and third data, the second response is response data of the second communication device, the second response corresponds to the second challenge, and the third data is obtained by encrypting a second time-varying parameter and a first device identifier according to a one-time authentication key by the first communication device; The second authentication data is verified based on the second physically unclonable function chip, and in a case where the second authentication data is verified, third authentication data is generated, including: inputting the second challenge into the second physically unclonable function chip to output the second response; decrypting the second data according to the second response to obtain third decrypted data, the third decrypted data including a third to-be-verified time-varying parameter, a third to-be-verified identifier, and the one-time authentication key; decrypting the third data according to the one-time authentication key to obtain fourth decrypted data, the fourth decrypted data including a fourth to-be-verified time-varying parameter and a fourth to-be-verified identifier; verifying the third to-be-verified time-varying parameter, the third to-be-verified identifier, the fourth to-be-verified time-varying parameter, and the fourth to-be-verified identifier, and in a case where the verification is passed, generating a third time-varying parameter; obtaining a second device identifier, the second device identifier being used to identify the first communication device; encrypting the third time-varying parameter and the second device identifier according to the one-time authentication key to generate the third authentication data.

8. The two-way authentication method of claim 7, wherein, The third to-be-verified time-varying parameter is a second timestamp, and the fourth to-be-verified time-varying parameter is a third timestamp; The third to-be-verified time-varying parameter, the third to-be-verified identifier, the fourth to-be-verified time-varying parameter, and the fourth to-be-verified identifier are verified, and in a case where the verification is passed, a third time-varying parameter is generated, including: obtaining a current timestamp, the second device identifier, and the first device identifier; calculating a difference between the current timestamp and the second timestamp to obtain a second time length; calculating a difference between the current timestamp and the third timestamp to obtain a third duration; determining whether the second duration is less than the second duration threshold, whether the third duration is less than the third duration threshold, whether the third to-be-verified identifier is the same as the second device identifier, and whether the fourth to-be-verified identifier is the same as the first device identifier; if the second duration is less than the second duration threshold, the third duration is less than the third duration threshold, the third to-be-verified identifier is the same as the second device identifier, and the fourth to-be-verified identifier is the same as the first device identifier, then the verification is passed; generating a third time-varying parameter in the case of passing the verification.

9. The bidirectional authentication method of claim 7, wherein, The third to-be-verified time-varying parameter is a second serial number, and the fourth to-be-verified time-varying parameter is a third serial number. The method comprises: obtaining a second verification serial number, a third verification serial number, the second device identifier, and the first device identifier; determining whether the second serial number is greater than the second verification serial number, whether the third serial number is greater than the third verification serial number, whether the third to-be-verified identifier is the same as the second device identifier, and whether the fourth to-be-verified identifier is the same as the first device identifier; if the second serial number is greater than the second verification serial number, the third serial number is greater than the third verification serial number, the third to-be-verified identifier is the same as the second device identifier, and the fourth to-be-verified identifier is the same as the first device identifier, then the verification is passed; generating a third time-varying parameter in the case of passing the verification.

10. A two-way authentication method, characterized by, The application is applied to an authentication center, and comprises: receiving a first time-varying parameter and a first device identifier sent by a first communication device, the first device identifier being used to identify a second communication device; generating first authentication data according to the first time-varying parameter and the first device identifier, the first authentication data comprising a first challenge, first data encrypted by a first response, and second data encrypted by a second response, the first response being response data of the first communication device, the first response corresponding to the first challenge, and the second response being response data of the second communication device; sending the first authentication data to the first communication device, so that the first communication device inputs the first challenge into a first physically unclonable function chip to output the first response; decrypting the first data according to the first response to obtain first decrypted data, the first decrypted data comprising a second challenge, a single-time authentication key, a first to-be-verified time-varying parameter, and a first to-be-verified identifier; verifying the first to-be-verified time-varying parameter and the first to-be-verified identifier, and generating a second time-varying parameter in the case of passing the verification; and encrypting the second time-varying parameter and the first device identifier according to the single-time authentication key to obtain third data, and generating second authentication data according to the second challenge, the second data, and the third data.

11. The bidirectional authentication method of claim 10, wherein, The authentication center stores a plurality of challenge-response pairs of the first communication device and a plurality of challenge-response pairs of the second communication device; The first authentication data is generated according to the first time-varying parameter and the first device identifier, and includes: In response to the first time-varying parameter and the first device identifier sent by the first communication device, a single authentication key is generated; A first challenge-response pair is obtained from the stored plurality of challenge-response pairs of the first communication device, and the first challenge-response pair includes a first challenge and a first response; A second challenge-response pair is obtained from the stored plurality of challenge-response pairs of the second communication device, and the second challenge-response pair includes a second challenge and a second response; The first data is encrypted according to the first response, the first time-varying parameter, the single authentication key, the first device identifier, and the second challenge; A fourth time-varying parameter and a second device identifier are obtained, and the second device identifier identifies the first communication device; The second data is encrypted according to the second response, the fourth time-varying parameter, and the single authentication key, the second device identifier; The first authentication data is generated according to the first challenge, the first data, and the second data.

12. A two-way authentication device, characterized by, The first communication device is applied to, and the first communication device is installed with a first physically unclonable function chip, and includes: The first sending module is configured to send a first time-varying parameter and a first device identifier to an authentication center, the first device identifier is used to identify a second communication device, so that the authentication center generates first authentication data according to the first time-varying parameter and the first device identifier, the first authentication data includes a first challenge, first response encrypted first data, and second response encrypted second data, the first response is response data of the first communication device, the first response corresponds to the first challenge, and the second response is response data of the second communication device; The first receiving module is configured to receive the first authentication data; The first verification module is configured to verify the first authentication data based on the first physically unclonable function chip, and generate second authentication data if the first authentication data passes the verification; The first sending module is further configured to send the second authentication data to the second communication device, so that the second communication device verifies the second authentication data, and generates third authentication data if the second authentication data passes the verification; The first receiving module is further configured to receive the third authentication data; The first verification module is further configured to verify the third authentication data, and the first communication device and the second communication device pass the mutual authentication if the third authentication data passes the verification; The first verification module is further configured to input the first challenge into the first physically unclonable function chip to output the first response; decrypt the first data according to the first response to obtain first decrypted data, the first decrypted data including a second challenge, a one-time authentication key, a first to-be-verified time-varying parameter, and a first to-be-verified identifier; verify the first to-be-verified time-varying parameter and the first to-be-verified identifier, and generate a second time-varying parameter if the verification is passed; encrypt the second time-varying parameter and the first device identifier according to the one-time authentication key to obtain third data; and generate the second authentication data according to the second challenge, the second data, and the third data.

13. A two-way authentication device, characterized by, The application is applied to a second communication device, and the second communication device is installed with a second physically unclonable function chip, and includes: The second receiving module is configured to receive second authentication data sent by the first communication device, the second authentication data being generated by the first communication device based on a first physically unclonable function chip, and the first authentication data being verified, the first authentication data including a first challenge, first data encrypted by a first response, and second data encrypted by a second response, the first response being response data of the first communication device, the first response corresponding to the first challenge, and the second response being response data of the second communication device; The second verification module is configured to verify the second authentication data based on the second physically unclonable function chip, and generate third authentication data if the second authentication data is verified; The second sending module is configured to send the third authentication data to the first communication device, so that the first communication device verifies the third authentication data, and the first communication device and the second communication device are successfully bidirectionally authenticated if the third authentication data is verified. The first communication device generates the second authentication data, including: inputting the first challenge into the first physically unclonable function chip to output the first response; decrypting the first data according to the first response to obtain first decrypted data, the first decrypted data including a second challenge, a one-time authentication key, a first to-be-verified time-varying parameter, and a first to-be-verified identifier; verifying the first to-be-verified time-varying parameter and the first to-be-verified identifier, and generating a second time-varying parameter if the verification is passed; encrypting the second time-varying parameter and the first device identifier according to the one-time authentication key to obtain third data; and generating the second authentication data according to the second challenge, the second data, and the third data.

14. A two-way authentication device, characterized by The application is applied to an authentication center, and includes: The third receiving module is configured to receive a first time-varying parameter and a first device identifier sent by the first communication device, the first device identifier being used to identify a second communication device; The generating module is configured to generate first authentication data according to the first time-varying parameter and the first device identifier, wherein the first authentication data comprises a first challenge, first data encrypted by a first response, and second data encrypted by a second response, the first response is response data of the first communication device, the first response corresponds to the first challenge, and the second response is response data of a second communication device. The third sending module is configured to send the first authentication data to the first communication device, so that the first communication device inputs the first challenge into a first physically unclonable function chip and outputs the first response; decrypt the first data according to the first response to obtain first decrypted data, wherein the first decrypted data comprises a second challenge, a one-time authentication key, a first to-be-verified time-varying parameter, and a first to-be-verified identifier; verify the first to-be-verified time-varying parameter and the first to-be-verified identifier, and generate a second time-varying parameter if the verification is passed; encrypt the second time-varying parameter and the first device identifier according to the one-time authentication key to obtain third data; and generate second authentication data according to the second challenge, the second data, and the third data.

15. An electronic device, comprising: The processor and the memory are included in a device. The processor is configured to execute the executable instructions of the memory to implement the bidirectional authentication method of any one of claims 1 to 11. The computer program is executed by the processor to implement the bidirectional authentication method of any one of claims 1 to 11. The computer program or instructions are executed by the processor to implement the bidirectional authentication method of any one of claims 1 to 11. ​ 16. A computer readable storage medium having stored thereon a computer program, characterized in that, ​ 17. A computer program product, comprising: ​

Images