58 results about "Digest access authentication" patented technology

The invention relates to a mutual access authentication method, which comprises the following steps: 1) a first entity sends an access authentication request group to a second entity, the second entity verifies whether the sign of the first entity is correct, if it is, calculates the shared primary key of the second entity; 2) the second entity generates an access response group and sends to the first entity, the first entity verifies whether the sign of the access response group is correct, if it is, calculates the shared primary key of the first entity; 3) the first entity sends an access authentication acknowledgement group to the second entity, the second entity verifies the integrity of the access authentication acknowledgement; if the verification succeeds, the shared primary keys of the first and second entities are consistent, completing the access authentication. The access authentication method of mutual authentication, provided in this invention, is based on the identity mechanism and can be used for the verification of identity validity with simple operation and wide application range.

Systems and methods of authenticating user access based on an access point to a secure data network include a secure data network having a plurality of a network access points serving as entry points for a user to access the secure data network using a user device. The user is associated with a user identity, each network access point with a network access point identity. The user uses a user device to send an access request, requesting access to the secure data network, to the network access point, which then sends an authentication request to an identity server. The identity server processes the authentication request, by validating the combination of the user identity and the network access point identity, and responds with an authentication response, granting or denying access, as communicated to the user device via an access response. The secure data network may comprise an application level secure data network, in which the user uses the user device to request access to a network application. Furthermore, the identity server may validate the combined user identity and network access point identity data in conjunction with time information, access allowance data, and / or traffic volume data.

A two-way access authentication method comprises: According to the system parameters pre-established by the third entity, the first entity sends the access authentication request packet to the second entity, then the second entity validates whether the signature of first entity is correct, and if yes, the share master key of second entity is calculated; the second entity generates the access authentication response packet and sends it to the first entity, then the first entity validates whether the signature of access authentication response packet and the message integrity check code are correct; if yes, the share master key of first entity is calculated; the first entity sends the access authentication acknowledge packet to the second entity, then the second entity validates the integrity of the access authentication acknowledge packet, if passing the validation, the share master key of first entity is consistent with that of the second entity, and the access authentication is achieved. For improving the security, after received the access authentication request packet sent by the first entity, the second entity may perform the identity validity validation and generates the access authentication response packet after passing the validation.