The invention relates to an anti-
quantum anonymity two-factor
authentication key negotiation method, and belongs to the technical field of
information security. The negotiation process comprises the following steps: a
client U sends login request information to a
server S based on an intelligent card issued by the
server S, wherein the login request information comprises a first
ciphertext C1, a random number R and a first message check code F1; the
server S verifies the received login request information, generates a
session key and sends a response message to the
client U, and the response message comprises a second
ciphertext C2 and a second message check code F2; the
client U verifies the received response message, obtains the
session key, generates a third message
verification code F3 and sends the third message
verification code F3 to the server S; and the server S verifies whether the negotiation is successful based on the third message
verification code F3. According to the method, two-way
authentication and two-way confirmation are achieved through three message verification codes, on the premise that digital
authentication infrastructure does not need to be transformed, client information identity is hidden, identity authentication and key negotiation of digital financial
payment are achieved, and better safety and good
usability are achieved.