Mutual Identity Authentication Using Encrypted Server Mediation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In communication networks, the interception of sensitive identity information during mutual identity authentication between a Requester (REQ) and an Authentication Access Controller (AAC) poses a significant security risk, as it exposes private and sensitive information, such as ID numbers, home addresses, and bank card information, to attackers.
Innovation Solution
An identity authentication method involving an authentication server is employed, where identity information is encrypted using a public key, and multiple digital signatures are used to verify the authenticity of both the REQ and AAC, ensuring confidentiality and integrity of the identity information through a series of encrypted and decrypted messages.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If identity information is transmitted in plaintext during mutual authentication, then authentication can be completed simply, but security is compromised as sensitive information becomes vulnerable to interception
Solution Approach 1:
The patent introduces an authentication server as an intermediary that mediates the authentication process between the user equipment and the access network device. The server generates authentication information and digital signatures, allowing the user equipment and access network device to authenticate each other without directly exchanging sensitive identity information, thus enhancing security while maintaining process simplicity
Solution Approach 2:
The patent uses digital certificates and digital signatures as cryptographic copies of identity information. Instead of transmitting actual identity data, the system transmits verified cryptographic representations that prove identity authenticity without exposing sensitive information, resolving the contradiction between security and simplicity
2Reliability
If sensitive identity information is encrypted and transmitted, then security is improved, but the transmission process becomes more complex with multiple encryption and decryption steps
Solution Approach 1:
The patent extracts sensitive identity information from the direct communication path between user equipment and access network device. The authentication server extracts and processes this information centrally, generating authentication credentials that can be transmitted without exposing the original sensitive data, thus maintaining confidentiality while reducing overall system complexity
Solution Approach 2:
The authentication server performs preliminary authentication and generates digital signatures before the actual data transmission occurs. This preliminary action ensures that subsequent communications can proceed with verified identities without requiring complex real-time encryption/decryption of sensitive information during the main data flow
Data Source
AI summary
Disclosed in the present application are an identity authentication method and apparatus, and a device, a chip, a storage medium and a program. The identity information of a requesting device is confidentially processed to prevent the identity information of the requesting device from being exposed during transmission, thereby ensuring that an attacker cannot obtain the private information of the requesting device. In addition, by introducing an authentication server, real-time two-way identity authentication between the requesting device and an authentication access controller is achieved while ensuring the confidentiality of entity identity-related information.