CN1142654C - Method for realizing network accreditation by encipher clobber generating - Google Patents

Abstract

The present invention relates to a method for realizing network identity accreditation by encryption chaos. A pair of identical cipher machines are designed by a computer and information encoding and network technology to be respectively arranged at a computer terminal of a user and a network server terminal. A finite random number is generated by the encryption of the cipher machine of the user terminal to be transmitted to a network server by a network, and random numbers are produced by an encryption operating mode of one code at one step; a string of finite encryption random numbers, a group of cipher key index codes and a user number are transmitted on a network line; random numbers with the same length are produced by the same cipher keys by the cipher machine of the server terminal; two groups of random numbers are compared, and accordingly, the network identity accreditation is realized.

Description

Adopt the system of encryption to act foolishly and realize the method for network ID authentication

Technical field:

The present invention relates to information security field, be based on the network ID authentication of DSE arithmetic, be to place the cipher machine of an identical establishment respectively with webserver two ends specifically at subscriber computer, after making disorderly by the encryption of user side cipher machine, with user number, index sign indicating number and the random number of basic key BK are transferred to the webserver in the lump, cipher machine by this end is decrypted system disorderly with same key, random number with the contrast two ends is realized authentication, simultaneously, the index sign indicating number by change at random basic key BK guarantees that each system of encrypting disorderly can both reach one-time pad.The network ID authentication product of this technology manufacturing can be used for fields such as government department, bank, security, insurance and other business web sites.

Background technology:

At present, the network ID authentication product of some information security manufacturers produce all is to adopt the mode of contrast user number and password to realize authentication both at home and abroad, this identification authentication mode is very dangerous, because, what transmit to the circuit of network server end at user side is " bright information ", " bright information " that " hacker " can steal on the circuit enters server, simultaneously, the user password word is shorter, password is made up of 6～10 bit digital, and most of user generally seldom changes for convenience, and this provides the advantage that breaks through webserver guard system also for " hacker ".In addition, brought into use the authentication of CA pattern in the world in recent years, this technology is based on the network ID authentication of asymmetric cryptosystem, not only the ca authentication center to be set up, also certificate management center and KMC etc., the system management complexity of this technology will be set up, daily key distribution is loaded down with trivial details, system sets up and has high input, and especially also will hand over service charge every year, causes the universal difficulty of this technology bigger.

Summary of the invention:

The present networks identity identifying method adopts computer, information coding and network technology to design the cipher machine of a pair of identical establishment, places subscriber computer end and network server end respectively, by comparing the random number that the two ends cipher machine generates, realizes authentication.All processes realizes that by soft, combination of hardware mode or pure software mode concrete grammar is as follows:

1, the random number of this identity identifying method is generated by cipher machine, and it is all different to satisfy the random number of at every turn encrypting generation, and the length of random number is L, is made up of numeral or English alphabet, and wherein: L=20～30, variable quantity is: 10 ²⁰～10 ³⁰Or 26 ²⁰～26 ³⁰

2, cipher machine uses two kinds of key cryptosystems, that is: user key UK and basic key BK, and UK is made up of 6～10 numerals, user oneself setting, and replaceable, simultaneously, on the webserver, to put on record, its variable quantity is 10 ⁶～10 ¹⁰BK is made up of 50～60 numerals or English alphabet, and its variable quantity is 10 ⁵⁰～10 ⁶⁰Or 26 ⁵⁰～26 ⁶⁰, in cipher machine, fixedly deposit 10 groups of different BK element B K _Ij(wherein: i=0～9, j=0～9), BK _IjBe made up of 5～6 bit digital or English alphabet, every group has 10 different Bk _IjElement during encryption, is got one according to the index sign indicating number respectively from these 10 groups of BK elements, form a BK for totally 10.

3, cipher machine uses basic key index sign indicating number to choose BK, and its index sign indicating number is made up of 10 numerals, and variable quantity is 10 ¹⁰, the index sign indicating number is a public information, is produced at random by cipher machine when encrypting, that is: K at every turn ₀K ₁K ₉Select BK, its method is, in these 10 numerals of index sign indicating number, and the corresponding Bk of N bit digital _IjIn N group Bk _Ij(wherein: N=0～9, i=0～9, j=0～9), each digital numerical value M is to organizing Bk _IjFigure place M, wherein: M=0～9, that is: the BK that is selected is: ${\mathrm{BK}}_{{0K}_0}{\mathrm{BK}}_{{1K}_1}...{\mathrm{BK}}_{{9K}_9}.$

4, user number is to be set by the webserver, and the user and the webserver are put on record respectively, and are public information.

5, the user side cipher machine with basic key BK and user key UK in conjunction with (comparing UK with BK falls short of as the cipher machine initial state, repeating 5～10 times uses), generate random number by encrypting the random logical circuit of system, and the index sign indicating number of itself and user number and basic key BK together passed to the webserver, the server end cipher machine takes out user key UK and basic key BK by the index sign indicating number of user number and basic key BK, and in conjunction with (comparing UK with BK falls short of as the initial state of cipher machine, repeating 5～10 times uses), generate random number by the random logical circuit of deciphering system, again the random number in two ends is compared, if identical then be validated user, otherwise, be the disabled user.

Description of drawings:

Fig. 1: the system of encrypting is disorderly carried out flow for authenticating ID figure

Fig. 2: the random flow chart of user side password encryption system

Fig. 3: the random flow chart of server end password to decipher system

Embodiment:

Performing step below in conjunction with the description of drawings identity identifying method:

Fig. 1: illustrate that subscriber computer utilizes the cipher machine of this end to encrypt system disorderly, give the webserver by Network Transmission in the lump with index sign indicating number and the random number of user number, basic key BK, the cipher machine of the webserver by this end with same secret key decryption system disorderly compares the random number of two ends generation and realizes authentication.

Fig. 2: cipher machine that subscriber computer controls this end random system of system with user key UK input cipher machine is described, and produce the index sign indicating number of basic key BK immediately by encryption control system, select BK by the index sign indicating number again, with its random system of input system, UK and BK in conjunction with generating initial state, produce random number L through the random logical circuit of system in the random system of system ₁, BK index sign indicating number and random number L that subscriber computer produces user number, cipher machine ₁Give the webserver by Network Transmission in the lump.

Fig. 3: receive the information that request that the user sends lands (that is: the index sign indicating number of user number, basic key BK, random number L at the webserver ₁) after, control the cipher machine of this end its information is verified, at first the user key UK that backs up in the user number corresponding server is taken out, and the decryption system by cipher machine, the BK of basic key index sign indicating number correspondence is selected, again both are sent into the random system of system and generate random number L ₂, at last to random number L ₁With random number L ₂Compare, determine whether to be validated user, if L ₁Equal L ₂Explanation is a validated user, then lands success, otherwise, land failure.

Claims (4)

1, adopting the system of encryption to act foolishly and realize the method for network ID authentication, is to utilize computer, information coding and network technology to realize that implementation step is as follows:

Form encrypted component or use software with feedback shift register and gate circuit, design a pair of identical cipher machine and place subscriber computer and webserver two ends respectively, subscriber computer is encrypted system disorderly with this end cipher machine, give the webserver by Network Transmission in the lump with the random number that generates, index sign indicating number and the user number of basic key BK, the cipher machine that server will be held with identical secret key decryption system disorderly, again the random number of random number that generates and user side transmission is compared, identical then is validated user, otherwise, be the disabled user.

2, require described network authentication method according to right 1, it is characterized in that:

The subscriber computer end to the random number in the network server end transmission information be by the user side cipher machine by user key UK and basic key BK in conjunction with initial state as the cipher machine feedback shift register, generate through the random logical circuit of the system of encrypting, random number is made up of L numeral or English alphabet, wherein: L=20～30, variable quantity are 10 ²⁰～10 ³⁰Or 26 ²⁰～26 ³⁰

3, require described network authentication method according to right 1, it is characterized in that:

After the webserver receives the index sign indicating number and random number of user number that the subscriber computer end sends, basic key BK, the user key UK that has backed up in server of user number correspondence is taken out, and use the cipher machine of this end to select BK according to the index sign indicating number, both are in conjunction with the initial state as this end cipher machine feedback shift register, generate random number through the random logical circuit of deciphering system, the random number that its length and the user side cipher machine that receives generate is with long.

4, require described network authentication method according to right 1, it is characterized in that:

(1) the user key UK of cipher machine is made up of U numeral, and wherein: U=6～10, variable quantity are 10 ⁶～10 ¹⁰, compare user key UK with basic key BK and fall short of, repeat 5～10 times and use;

(2) the basic key BK of cipher machine is made up of B numeral or English alphabet, and wherein: B=50～60, variable quantity are 10 ⁵⁰～10 ⁶⁰Or 26 ⁵⁰～26 ⁶⁰, the cipher machine internal fixation is deposited 10 groups of different BK element B K _Ij, wherein: BK _IjForm i=0～9, j=0～9, every group of totally 10 different Bk by 5～6 numerals or English alphabet _Ij, when encrypting, from 10 groups of Bk at every turn _IjIn respectively get 1, totally 10 Bk _IjForm a BK, participate in the system of encrypting disorderly;

(3) the index sign indicating number of the basic key BK of cipher machine is made up of 10 bit digital, that is: K ₀K ₁K ₉, variable quantity is 10 ¹⁰, produce at random by encryption system, be used to select Bk _IjForm BK, its method is, in these 10 numerals of index sign indicating number, and the corresponding Bk of N bit digital _IjIn N group Bk _Ij, wherein: N=0～9, i=0～9, j=0～9, each digital numerical value M is to organizing Bk _IjFigure place M, wherein: M=0～9 that is: are selected BK and are: ${\mathrm{BK}}_{{0K}_0}{\mathrm{BK}}_{1K_1}...{\mathrm{BK}}_{{9K}_9}.$

Images