WO2022135380A1

WO2022135380A1 - Identity authentication method and apparatus

Info

Publication number: WO2022135380A1
Application number: PCT/CN2021/140011
Authority: WO
Inventors: 铁满霞; 曹军; 赵晓荣; 赖晓龙; 李琴; 张变玲; 张国强
Original assignee: 西安西电捷通无线网络通信股份有限公司
Priority date: 2020-12-26
Filing date: 2021-12-21
Publication date: 2022-06-30
Also published as: CN114760028A

Abstract

Disclosed are an identity authentication method and apparatus. The method comprises: an authentication access controller (AAC) receiving an identity message which is sent by a request device REQ and comprises an REQ digital certificate, and sending, to a first authentication server trusted thereby, a first authentication request message which carries the REQ digital certificate and an identity authentication code of the AAC; the first authentication server verifying the identity authentication code of the AAC to obtain a first verification result; a second authentication server trusted by the REQ verifying the legitimacy of the REQ digital certificate to obtain a second verification result; the AAC receiving a first authentication response message which is sent by the first authentication server and carries the first verification result and the second verification result; the AAC acquiring an identity authentication result of the REQ according to the message, and sending, to the REQ, a third authentication response message which comprises the first verification result; and the REQ acquiring an identity authentication result of the AAC according to the message, thereby realizing bidirectional identity authentication.

Description

A kind of identity authentication method and device

CROSS-REFERENCE TO RELATED APPLICATIONS

This application claims the priority of the Chinese patent application with the application number 202011569181.1 and the application title "An identity authentication method and device" filed with the China Patent Office on December 26, 2020, the entire contents of which are incorporated into this application by reference .

technical field

The present application relates to the technical field of network communication security, and in particular, to an identity authentication method and device.

Background technique

Currently, communication networks often require two-way authentication between users and network access points to ensure legitimate users access to legitimate networks. In the existing entity authentication schemes, the entity's identity certificate is either in the form of a digital certificate or a pre-shared key. However, in practical applications, one end uses a digital certificate as an identity certificate and the other end The pre-shared key is used as an identity credential, which poses a challenge to the entity identity authentication mechanism.

SUMMARY OF THE INVENTION

In order to solve the above technical problems, the present application provides an identity authentication method and device, which realizes the two-way identity authentication of entities when the requesting device uses a digital certificate and the authentication access controller uses a pre-shared key as the identity credential.

In view of this, a first aspect of the present application provides an identity authentication method, including:

The authentication access controller receives the identity message sent by the requesting device, and the identity message includes the digital certificate of the requesting device;

The authentication access controller sends a first authentication request message to its trusted first authentication server, where the first authentication request message includes the digital certificate of the requesting device and the identity authentication code of the authentication access controller The identity authentication code of the authentication access controller is that the authentication access controller utilizes the pre-shared key with the first authentication server, and adopts the cryptographic algorithm agreed with the first authentication server to include the Calculated from the information including the digital certificate of the requesting device;

The authentication access controller receives a first authentication response message sent by the first authentication server, where the first authentication response message includes first authentication result information and the first authentication result of the second authentication server trusted by the requesting device. The digital signature, the second authentication result information, and the first message authentication code of the first authentication server; the first authentication result information includes the first verification result of the identity authentication code of the authentication access controller, so The first digital signature is a digital signature calculated and generated by the second authentication server on the signature data including the first authentication result information, and the second authentication result information includes information about the digital certificate of the requesting device. In the second verification result, the first message authentication code of the first authentication server is that the first authentication server uses the pre-shared key with the authentication access controller and adopts the pre-shared key agreed with the authentication access controller. The cryptographic algorithm calculates and generates the information including the second authentication result information;

The authentication access controller uses the pre-shared key with the first authentication server, and uses the cryptographic algorithm agreed with the first authentication server to verify the first message authentication code of the first authentication server. If the verification passes , then the authentication access controller determines the identity authentication result of the requesting device according to the second verification result in the second authentication result information; when the authentication access controller determines the identity authentication result of the requesting device When it is valid, send a third authentication response message to the requesting device; or,

The authentication access controller uses the pre-shared key with the first authentication server, and uses the cryptographic algorithm agreed with the first authentication server to verify the first message authentication code of the first authentication server. If the verification passes , then the authentication access controller sends a third authentication response message to the requesting device and determines the identity authentication result of the requesting device according to the second verification result in the second authentication result information; or,

The authentication access controller uses the pre-shared key with the first authentication server, and uses the cryptographic algorithm agreed with the first authentication server to verify the first message authentication code of the first authentication server; if the If the first message authentication code of the first authentication server passes the authentication, the authentication access controller determines the identity authentication result of the requesting device according to the second authentication result in the second authentication result information; the authentication access controller the controller sends a third authentication response message to the requesting device;

Wherein, the third authentication response message includes the first authentication result information and the first digital signature;

After receiving the third authentication response message, the requesting device verifies the first digital signature by using the public key of the second authentication server. The first verification result determines the identity authentication result of the authentication access controller.

A second aspect of the present application provides a requesting device, including:

a sending module, configured to send an identity message to the authentication access controller, where the identity message includes the digital certificate of the requesting device;

a receiving module, configured to receive a third authentication response message sent by the authentication access controller, where the third authentication response message includes first authentication result information and a first digital signature; the first authentication result information includes For the first verification result of the authentication access controller, the first digital signature is a digital signature calculated and generated by a second authentication server trusted by the requesting device to the signature data including the first authentication result information ;

a verification module, configured to verify the first digital signature by using the public key of the second authentication server;

A determining module, configured to determine the identity authentication result of the authentication access controller according to the first authentication result in the first authentication result information if the authentication is passed.

A third aspect of the present application provides an authentication access controller, including:

a receiving module, configured to receive an identity message sent by a requesting device, where the identity message includes a digital certificate of the requesting device;

The generating module is configured to use the pre-shared key with the first authentication server trusted by the authentication access controller, and use the cryptographic algorithm agreed with the first authentication server to perform a cryptographic algorithm including the digital certificate of the requesting device. information calculation to generate the identity authentication code of the authentication access controller;

a sending module, configured to send a first authentication request message to the first authentication server, where the first authentication request message includes the digital certificate of the requesting device and the identity authentication code of the authentication access controller;

The receiving module is further configured to receive a first authentication response message sent by the first authentication server, where the first authentication response message includes first authentication result information and the first authentication result information of the second authentication server trusted by the requesting device. a digital signature, the second authentication result information and the first message authentication code of the first authentication server; the first authentication result information includes the first authentication result of the identity authentication code of the authentication access controller, The first digital signature is a digital signature calculated and generated by the second authentication server on the signature data including the first authentication result information, where the second authentication result information includes a digital certificate for the requesting device The second verification result of the first authentication server, the first message authentication code of the first authentication server is that the first authentication server uses the pre-shared key with the authentication access controller and adopts the agreement with the authentication access controller. The cryptographic algorithm is generated by calculating the information including the second authentication result information;

A verification module, configured to use the pre-shared key with the first authentication server to verify the first message authentication code of the first authentication server by adopting the cryptographic algorithm agreed with the first authentication server; if the verification is passed, then The determination module determines the identity authentication result of the requesting device according to the second verification result in the second authentication result information; when the determining module determines that the identity authentication result of the requesting device is legal, the sending module sends the request device to the requesting device. The requesting device sends a third authentication response message; or,

It is used to verify the first message authentication code of the first authentication server by using the pre-shared key with the first authentication server and adopt the cryptographic algorithm agreed with the first authentication server. The module sends a third authentication response message to the requesting device, and the determining module determines the identity authentication result of the requesting device according to the second verification result in the second authentication result information; or,

It is used to verify the first message authentication code of the first authentication server by using the pre-shared key with the first authentication server and adopt the cryptographic algorithm agreed with the first authentication server; If the verification of the first message authentication code is passed, the determination module determines the identity authentication result of the requesting device according to the second verification result in the second authentication result information; the sending module sends a third authentication response message to the requesting device ;

Wherein, the third authentication response message includes the first authentication result information and the first digital signature.

A fourth aspect of the present application provides a first authentication server, including:

The receiving module is configured to receive the first authentication request message sent by the authentication access controller, where the first authentication request message includes the digital certificate of the requesting device and the identity authentication code of the authentication access controller; the authentication access controller; The identity authentication code of the access controller is the authentication access controller uses the pre-shared key with the first authentication server, and adopts the cryptographic algorithm agreed with the first authentication server to verify the digital certificate including the requesting device. generated by the calculation of the information included;

A sending module, configured to send a first authentication response message to the authentication access controller, where the first authentication response message includes first authentication result information and a first digital signature of a second authentication server trusted by the requesting device , the second authentication result information and the first message authentication code of the first authentication server; the first authentication result information includes the first authentication result of the identity authentication code of the authentication access controller, the first authentication result information A digital signature is a digital signature calculated and generated by the second authentication server on the signature data including the first authentication result information, and the second authentication result information includes the second authentication result of the digital certificate of the requesting device. As a result of verification, the first message authentication code of the first authentication server is that the first authentication server uses the pre-shared key with the authentication access controller and adopts the cryptographic algorithm agreed with the authentication access controller. Calculated and generated from information including the second authentication result information.

A fifth aspect of the present application provides a second authentication server, including:

A receiving module, configured to receive a second authentication request message sent by the first authentication server, where the second authentication request message includes the first authentication result information, the digital certificate of the requesting device and the second digital signature or the second authentication request The message includes the first authentication result information, the digital certificate of the requesting device and the second message authentication code; the first authentication result information is obtained by the first authentication server verifying the identity authentication code of the access controller. a verification result, which is generated according to the information including the first verification result; the second digital signature is obtained by the first verification server for the digital certificate including the first verification result information and the requesting device or the second message authentication code is generated by the first authentication server using the pre-shared key with the second authentication server, using the cryptographic algorithm agreed with the second authentication server Calculated and generated from information including the first authentication result information and the digital certificate of the requesting device;

A verification module for verifying the second digital signature by using the public key of the first authentication server or using the pre-shared key with the first authentication server, and using the cryptographic algorithm agreed with the first authentication server to verify For the second message authentication code, if the verification is passed, the validity of the digital certificate of the requesting device is verified to obtain a second verification result;

The generating module is configured to generate second authentication result information according to the information including the second verification result, calculate and generate a first digital signature for the signature data including the first authentication result information, and generate a first digital signature for the signature data including the first authentication result information. 2. Calculate the signature data including the authentication result information to generate a third digital signature or use the pre-shared key with the first authentication server, and use the cryptographic algorithm agreed with the first authentication server to generate a third digital signature including the second authentication result. Information calculation including information generates a third message authentication code;

A sending module, configured to send a second authentication response message to the first authentication server, where the second authentication response message includes the first authentication result information, the first digital signature, and the second authentication result information and the third digital signature or the second authentication response message includes the first authentication result information, the first digital signature, the second authentication result information and the third message authentication code.

A sixth aspect of the present application provides a requesting device, including:

memory for storing program instructions;

The processor is configured to call the program instructions stored in the memory, and execute the method on the requesting device side in the first aspect according to the obtained program.

A seventh aspect of the present application provides an authentication access controller, including:

memory for storing program instructions;

The processor is configured to call the program instructions stored in the memory, and execute the method for identifying the access controller side in the first aspect according to the obtained program.

An eighth aspect of the present application provides a first authentication server, including:

memory for storing program instructions;

The processor is configured to call the program instructions stored in the memory, and execute the method on the first authentication server side in the first aspect according to the obtained program.

A ninth aspect of the present application provides a second authentication server, including:

memory for storing program instructions;

The processor is configured to call the program instructions stored in the memory, and execute the method on the second authentication server side in the first aspect according to the obtained program.

A tenth aspect of the present application provides a computer storage medium, where the computer storage medium stores computer-executable instructions, where the computer-executable instructions are used to cause the computer to execute the method described in the first aspect.

It can be seen from the above: in an identity authentication method provided by this application, the requesting device uses a digital certificate as its identity credential, and the authentication access controller uses a pre-shared key as its identity credential. Send an identity message to the authentication access controller, the identity message includes the digital certificate of the requesting device; the authentication access controller uses the pre-shared key of the first authentication server it trusts, and adopts the pre-shared key agreed with the first authentication server. The cryptographic algorithm calculates the information including the digital certificate of the requesting device to generate the identity authentication code that authenticates the access controller, and then sends the digital certificate including the requesting device and the identity of the authentication access controller to the first authentication server. The first authentication request message of the authentication code is obtained by verifying the legality of the digital certificate of the requesting device by the second authentication server trusted by the requesting device, and by the first authentication server verifying the identity authentication code of the access controller. Verification result; the first authentication server sends a first authentication response message to the authentication access controller, and the authentication access controller obtains the verification result of the requesting device from the first authentication response message to determine whether the requesting device is legal, and the requesting device from The authentication result of the authentication access controller is obtained from the third authentication response message sent by the authentication access controller, so as to determine whether the authentication access controller is legal, so as to realize the two-way identity authentication between the authentication access controller and the requesting device, Lay the groundwork to ensure that only legitimate users can communicate with legitimate networks.

Description of drawings

In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the following briefly introduces the accompanying drawings that are used in the description of the embodiments or the prior art. Obviously, the drawings in the following description are only These are some embodiments of the present application. For those of ordinary skill in the art, other drawings can also be obtained based on these drawings without any creative effort.

1 is a schematic diagram of an identity authentication method provided by an embodiment of the present application;

2 is a schematic diagram of an identity authentication method provided by an embodiment of the present application, wherein "*" represents an optional field or an optional operation;

3 is a schematic diagram of an identity authentication method provided by an embodiment of the present application, wherein "*" represents an optional field or an optional operation;

4 is a schematic diagram of an identity authentication method provided by an embodiment of the present application, wherein "*" represents an optional field or an optional operation;

5 is a schematic diagram of an identity authentication method provided by an embodiment of the present application, wherein "*" represents an optional field or an optional operation;

6 is a structural block diagram of a requesting device REQ provided by an embodiment of the present application;

FIG. 7 is a structural block diagram of an authentication access controller AAC according to an embodiment of the present application;

8 is a structural block diagram of a first authentication server AS-AAC according to an embodiment of the present application;

9 is a structural block diagram of a second authentication server AS-REQ provided by an embodiment of the present application;

10 is a structural block diagram of another requesting device REQ provided by an embodiment of the present application;

FIG. 11 is a structural block diagram of another authentication access controller AAC provided by an embodiment of the present application;

12 is a structural block diagram of another first authentication server AS-AAC provided by an embodiment of the present application;

FIG. 13 is a structural block diagram of another second authentication server AS-REQ provided by an embodiment of the present application.

Detailed ways

In a communication network, the requesting device can access the network through the authentication access controller. In order to ensure that the requesting device accessing the network belongs to a legitimate user and the network that the requesting device accesses is a legitimate network, the authentication between the access controller and the requesting device needs to be performed. Mutual Identity Authentication (MIA for short).

Taking the current wireless communication and mobile communication scenarios as an example, in the scenario where the requesting device accesses the wireless network through the authentication access controller, the requesting device can be a mobile phone, a personal digital assistant (PDA), a tablet computer, etc. The terminal device, the authentication access controller can be a network side device such as a wireless access point and a wireless router. In the scenario where the requesting device accesses the wired network through the authentication access controller, the requesting device may be a terminal device such as a desktop computer or a notebook computer, and the authentication access controller may be a network-side device such as a switch or a router. In the scenario where the requesting device accesses the 4th/5th Generation mobile communication technology (4G/5G) network through the authentication access controller, the requesting device may be a terminal device such as a mobile phone and a tablet computer. The authentication access controller may be a network side device such as a base station. Of course, the present application is also applicable to various data communication scenarios such as other wired networks and short-range communication networks.

However, in the existing entity authentication scheme, the identity certificate of the entity is either in the form of a digital certificate or a pre-shared key. When the pre-shared key is used as an identity certificate, no concise and effective authentication mechanism is proposed.

In order to solve the above technical problems, an embodiment of the present application provides an identity authentication method. For an application scenario in which a digital certificate is used for the requesting device and a pre-shared key is used for the authentication access controller, the first authentication method trusted by the authentication access controller is used. The server verifies the identity authentication code generated by the authentication access controller according to the pre-shared key to obtain the first verification result, and the second authentication server trusted by the requesting device verifies the legality of the digital certificate of the requesting device to obtain the second verification result, The requesting device and the authentication access controller respectively determine whether the counterparty entity is legal according to the verification result of the counterparty entity, realize the two-way identity authentication between the authentication access controller and the requesting device, and lay the foundation for ensuring that only legitimate users can communicate with the legitimate network.

For ease of introduction, in the embodiments of the present application, a request device (REQuester, referred to as REQ), an authentication access controller (Authentication Access Controller, referred to as AAC) and an authentication server (Authentication Server, referred to as AS) will be used as examples to describe the requirements of the present application. The identification method is introduced.

The AS trusted by AAC is called the first authentication server AS-AAC, and the AS trusted by REQ is called the second authentication server AS-REQ. AS-REQ holds digital certificates and private keys corresponding to digital certificates that comply with ISO/IEC 9594-8/ITU X.509, other standards or other technical systems. AS-AAC can verify the legitimacy of AAC's identity. AS-REQ Able to verify the legitimacy of REQ's identity. AS-AAC and AS-REQ can be the same AS or different ASs. When AS-AAC is the same as AS-REQ, it is a non-roaming situation; when AS-AAC is different from AS-REQ, it is a roaming situation. At this time, there is a valid pre-shared key between AS-REQ and AS-AAC, or, when AS-AAC holds a digital certificate that complies with ISO/IEC 9594-8/ITU X.509, other standards or other technical systems When the private key corresponding to the digital certificate is used, AS-AAC and AS-REQ know each other's digital certificate or the public key in the digital certificate.

The REQ can be an endpoint that participates in the authentication process, establishes a connection with the AAC, accesses the services provided by the AAC, and accesses the AS through the AAC. REQ holds digital certificates and private keys corresponding to digital certificates that comply with ISO/IEC 9594-8/ITU X.509, other standards or other technical systems, and knows AS-REQ's digital certificates or public keys in digital certificates. The AAC can be another endpoint participating in the authentication process, establish a connection with the REQ, provide services, communicate with the REQ, and can directly access the AS-AAC, with a valid pre-shared key between the AAC and the AS-AAC.

1, an identity authentication method provided by the embodiment of the present application is described, and the method includes:

S101. The AAC receives the identity message REQInit sent by the REQ.

The REQInit includes the digital certificate Cert REQ of _REQ .

S102. The AAC sends a first authentication request message AACVeri to the AS-AAC it trusts.

The AACVeri includes the Cert _REQ in REQInit and the identification code MIC AAC of the _AAC . The MIC _AAC is calculated and generated by the AAC using the pre-shared key K _{AAC_AS} with the AS-AAC and the cryptographic algorithm agreed with the AS-AAC on the information including the Cert _REQ . For example, the cryptographic algorithm agreed by AAC and AS-AAC may be a hash algorithm. AAC uses the K _{AAC_AS} and adopts the hash algorithm agreed with AS-AAC to include other fields in AACVeri before the MIC _AAC field, such as including the Cert _REQ The hash value is obtained by hash operation, and the hash value is used as the identity authentication code MIC AAC of _AAC .

In this embodiment, the AAC uses the MIC _AAC as the identity information, the REQ uses the Cert _REQ as the identity information, the AS-AAC trusted by the AAC can verify the MIC _AAC to determine the legitimacy of the AAC identity, and the AS-REQ trusted by the REQ can verify the Cert _REQ the legitimacy of the REQ identity.

It should be noted that when the AS-AAC trusted by AAC and the AS-REQ trusted by REQ are the same authentication server, the authentication server trusted by AAC and REQ can be represented by AS-AAC (of course, AS-REQ can also be used) . In this case, the Cert _REQ and the MIC _AAC are verified by AS-AAC (also denoted AS-REQ). Wherein, AS-AAC (also can be expressed as AS-REQ) utilizes the pre-shared key K _{AAC_AS} with _AAC , and adopts the cryptographic algorithm agreed with AAC to verify MIC _AAC to obtain the first verification result Res _AAC , according to The information generates the first identification result information Pub _AAC , carries out the legality verification on the Cert _REQ to obtain the second verification result Res _REQ , generates the second identification result information Pub _REQ according to the information including the Res _REQ , and uses the K _{AAC_AS} to adopt The cryptographic algorithm agreed with AAC calculates and generates the first message authentication code MIC _{AS_AAC} of AS-AAC (also can be expressed as the first message authentication code MIC _{AS_REQ} of AS-REQ) for the information including Pub _REQ , and the first message authentication code MIC AS_REQ of AS- _AAC is calculated for information including Pub REQ. The signature data in the calculation generates the first digital signature Sig _{AS_AAC1} (also can be expressed as Sig _{AS_REQ1} ), according to including the Pub _AAC , the Sig _{AS_AAC1} (also can be expressed as Sig _{AS_REQ1} ), the Pub _REQ and the MIC _{AS_AAC} (may also be expressed as MIC _{AS_REQ} ) to generate the first authentication response message ASVeri.

When the AS-AAC trusted by AAC and the AS-REQ trusted by REQ are two different authentication servers, AS-AAC uses the pre-shared key K _{AAC_AS} with AAC, and uses the cryptographic algorithm agreed with AAC to verify that MIC _AAC gets the first The verification result Res _AAC , generates the first authentication result information Pub _AAC according to the information including the Res _AAC , calculates and generates the second digital signature Sig _{AS_AAC2} for the signature data including the Pub _AAC and the Cert _REQ , and sends the second digital signature Sig AS_AAC2 to the AS-REQ. Two authentication request message AS-AACVeri, the AS-AACVeri includes the Pub _AAC , the Cert _REQ and the Sig _{AS_AAC2} . Wherein, Sig _{AS_AAC2} can be replaced with MIC _{AS_AAC2} , MIC _{AS_AAC2} is that AS-AAC uses the pre-shared key with AS-REQ, adopts the cryptographic algorithm (which can be a hash algorithm) agreed with AS-REQ to pair the Pub _AAC and all The second message authentication code generated by calculating the information including the Cert _REQ .

After AS-REQ receives the AS-AACVeri, it uses the public key of AS-AAC to verify the Sig _{AS_AAC2} , or uses the pre-shared key with AS-AAC to verify the MIC _{AS_AAC2} using the cryptographic algorithm agreed with AS-AAC After the verification is passed, AS-REQ performs legality verification on the Cert _REQ to obtain the second verification result Res _REQ , generates the second identification result information Pub _REQ according to the information including the Res _REQ , and signs the signature including the Pub _AAC The data is calculated to generate the first digital signature Sig _{AS_REQ1} , the signature data including the Pub _REQ is calculated to generate the third digital signature Sig _{AS_REQ3} , and the second authentication response message AS-REQVeri is sent to the AS-AAC, the AS-REQVeri include the Pub _AAC , the Sig _{AS_REQ1} , the Pub _REQ and the Sig _{AS_REQ3} . Wherein, Sig _{AS_REQ3} can be replaced with MIC _{AS_REQ3} , and MIC _{AS_REQ3} is the first result calculated by AS-REQ using the pre-shared key with AS-AAC and using the cryptographic algorithm agreed with AS-AAC to calculate the information including the Pub _REQ . Three message authentication codes.

After the AS-AAC receives the AS-REQVeri, it uses the public key of the AS-REQ to verify the Sig _{AS_REQ3} , or uses the pre-shared key with the AS-REQ to verify the MIC _{AS_REQ3} using the cryptographic algorithm agreed with the AS-REQ. , after the verification is passed, AS-AAC utilizes the pre-shared key K _{AAC_AS} with AAC, adopts the cryptographic algorithm agreed with AAC to calculate and generate the first message authentication code MIC _{AS_AAC} of AS-AAC on the information including the Pub _REQ , A first authentication response message ASVeri is generated according to information including the Pub _AAC , the Sig _{AS_REQ1} , the Pub _REQ and the MIC _{AS_AAC} .

S103. The AAC receives the first authentication response message ASVeri sent by the AS-AAC.

The ASVeri includes the first authentication result information Pub _AAC , the first digital signature Sig _{AS_REQ1} of the AS-REQ, the second authentication result information Pub _REQ and the first message authentication code MIC _{AS_AAC} of the AS-AAC.

S104, AAC uses the pre-shared key K _{AAC_AS} with AS-AAC, and uses the cryptographic algorithm agreed with AS-AAC to verify the MIC _{AS_AAC} .

The AAC uses the K _{AAC_AS} to calculate the MIC _{AS_AAC} locally for the information including the Pub _REQ in the ASVeri by using the cryptographic algorithm, and compares it with the MIC _{AS_AAC} in the received ASVeri to complete the MIC AS_AAC Validation of _{AS_AAC} .

S105. The AAC determines the identity authentication result of the REQ according to the Res _REQ in the Pub _REQ .

S106, AAC sends a third authentication response message AACAuth to REQ.

The AACAuth includes the Pub _AAC and the Sig _{AS_REQ1} .

It should be noted that the execution sequence of S104 to S106 does not affect the specific implementation of the present application. In practical applications, the execution sequence of S104 to S106 may be set according to requirements. Preferably, it is recommended to perform S104 first, and when the AAC fails to verify the MIC _{AS_AAC} , discard the ASVeri of S103, and then perform S105 after the AAC has passed the verification of the MIC _{AS_AAC} , and perform S106 when the AAC determines that the REQ is valid. , when the AAC determines that the REQ is invalid, the AAC selects whether to execute S106 according to the local policy. Considering the efficiency, the preferred solution is not to execute and end the current authentication process.

S107, REQ verifies the Sig _{AS_REQ1} by using the public key of the AS-REQ, and if the verification is passed, determines the identity authentication result of the AAC according to the Res _AAC in the Pub _AAC .

After the REQ passes the verification of the Sig _{AS_REQ1} , it can determine whether the AAC is legal according to the Res _AAC in the Pub _AAC , which lays a foundation for ensuring that the REQ accesses a legal network; if the REQ fails the verification of the Sig _{AS_REQ1} , the AACAuth is discarded.

It can be seen from the above that for the authentication scenario in which the requesting device uses a digital certificate and the authentication access controller uses a pre-shared key, the first authentication server trusted by the authentication access controller uses the pre-shared key to generate the authentication access controller. The identity authentication code is verified to obtain a first verification result, and the second verification server trusted by the requesting device verifies the legality of the digital certificate of the requesting device to obtain a second verification result, and the requesting device and the authentication access controller are based on the verification of the other entity respectively. The result is to determine whether the other entity is legal, realize the two-way identity authentication between the access controller and the requesting device, and lay the foundation for ensuring that only legal users can access the legal network.

Please refer to FIG. 1 , the REQInit of S101 may also include the digital signature Sig _REQ of REQ, and the signature data of Sig _REQ includes other fields before Sig _REQ in REQInit; then before S105, AAC also determines whether the Sig _REQ passes the verification , if it is determined that the Sig _REQ verification is passed, the AAC then determines the identity authentication result of the REQ according to the Res _REQ in the Pub _REQ . Wherein, AAC determines whether the Sig _REQ is verified through the following methods:

As an example of verifying the Sig _REQ by the authentication server, in the case that AS-REQ and AS-AAC are the same authentication server (that is, non-roaming), when AS-AAC (which can also be expressed as AS-REQ) ) When verifying the Sig _REQ , the Sig _REQ can be carried in the AACVeri of S102 and passed to AS-AAC (also expressed as AS-REQ), and AS-AAC (also expressed as AS-REQ) utilizes the Cert in AACVeri The _REQ verifies the Sig _REQ , and if the verification passes, the operation of generating and sending the first authentication response message ASVeri is continued; if the verification fails, the AACVeri is discarded. Therefore, the AAC can determine whether the Sig _REQ has passed the verification according to whether it can receive the ASVeri of S103, and if the AAC can receive the ASVeri of S103, the AAC can determine that the Sig _REQ has passed the verification.

As another embodiment of verifying the Sig _REQ by the authentication server, in the case that AS-REQ and AS-AAC are two different authentication servers (ie roaming), when AS-REQ verifies the Sig _REQ , Sig _REQ can be carried in the second authentication request message AS-AACVeri sent by AACVeri of S102 and AS-AAC to AS-REQ to AS-REQ, and AS-REQ uses Cert _REQ in AS-AACVeri to verify the Sig _REQ , if the verification is passed, then AS-REQ continues to generate and send the second authentication response message AS-REQVeri and AS-AAC continue to perform the operation of generating and sending the first authentication response message ASVeri; if the verification fails, then AS-REQVeri REQ discards AS-AACVeri. Therefore, the AAC can determine whether the Sig _REQ has passed the verification according to whether it can receive the ASVeri of S103, and if the AAC can receive the ASVeri of S103, the AAC can determine that the Sig _REQ has passed the verification.

As an embodiment of verifying the Sig _REQ by the AAC, the AAC uses the Cert _REQ in the REQInit of S101 to verify the Sig _REQ , and determines whether the Sig _REQ is verified according to the verification result, and if the verification fails, the REQInit is discarded. Of course, if Pub _REQ also includes Cert _REQ , AAC can first verify the consistency of Cert _REQ in Pub _REQ and Cert _REQ in REQInit, if they are consistent, AAC then uses Cert _REQ to verify the Sig _REQ , according to the verification result Determine whether the Sig _REQ is verified. Wherein, AAC may not verify the consistency of Cert _REQ in Pub _REQ and Cert _REQ in REQInit, but directly use Cert _REQ in Pub _REQ to verify the Sig _REQ .

It should be noted that information such as random numbers and identity identifiers of REQ and/or AAC may be transmitted in messages exchanged in the identity authentication process. Under normal circumstances, the random number and/or ID carried in the received message should be the same as the random number and/or ID carried in the sent message. However, in the event of network jitter or attack, the Loss or tampering of parameter information. Therefore, in some embodiments of the present application, the reliability of the authentication result can also be ensured by comparing whether the random numbers and/or identity identifiers in the sent and received messages are consistent. details as follows:

Referring to FIG. 1, before S101, AAC may send a first message AACInit to REQ, and AACInit includes the first random number Nonce _AAC generated by AAC. Correspondingly, REQInit of S101 may also include the Nonce _AAC , then AAC is in After receiving REQInit, verify the consistency of the Nonce _AAC in REQInit and the Nonce AAC generated by _AAC (that is, the Nonce _AAC sent by AAC through AACInit) to ensure that the REQInit received by AAC is a response message to AACInit. If the consistency verification of _AAC is passed, then AAC sends AACVeri of S102 again.

In some other embodiments, the AACVeri of S102 may further include the identity ID _{AAC of AAC} and/or the first random number Nonce AAC generated by _AAC ; correspondingly, the ASVeri of S103 may also include the ID _AAC and/or The Nonce _AAC ; then before S105, the AAC also needs to verify the consistency of the ID AAC in the ASVeri and the identity ID _AAC of the _AAC itself (that is, the ID _AAC sent by the AAC through AACVeri), and/or, to The consistency of the Nonce _AAC in ASVeri and the Nonce AAC generated by _AAC (that is, the Nonce _AAC sent by AAC through AACVeri) is verified; if the verification is passed, the AAC then determines the identity authentication result of the REQ according to the Res _REQ in the Pub _REQ .

Of course, in order to ensure the reliability of the authentication result, the REQ may also verify the consistency of the second random number Nonce REQ generated by the _REQ and/or the identity ID _REQ of the REQ.

Please refer to FIG. 1, the REQInit of S101 may also include the identity ID _{REQ of REQ} and/or the second random number Nonce _{REQ generated by REQ} , then the AACVeri, the second authentication request message AS-AACVeri, the second authentication request message AS-AACVeri of S102 in the subsequent interaction The ID _REQ and/or the Nonce _REQ may also be included in the authentication response message AS-REQVeri, the AACAuth of S103, and the AACAuth of S106; therefore, in S107, before the REQ determines the identity authentication result of the AAC according to the Res _AAC in the Pub _AAC , REQ also verifies the consistency between the ID _REQ in AACAuth and the ID _REQ of REQ itself (that is, the ID _REQ sent by REQ through REQInit), and/or, the Nonce _REQ and REQ in AACAuth generate The consistency of the Nonce _REQ (that is, the Nonce _REQ sent by the REQ through REQInit) is verified; if the verification is passed, the REQ determines the identity authentication result of the AAC according to the Res _AAC in the Pub _AAC .

It should be noted that, in some other embodiments, if the Pub _AAC also includes the identity ID _AAC of the AAC, correspondingly, the AACAuth of S106 also includes the identity ID _AAC of the AAC, or before S101, the AAC sends the REQ The first message AACInit sent also includes the identity identification ID _{AAC of AAC} ; then in S107, REQ determines the identity authentication result of AAC according to the Res _AAC in the Pub _AAC , and the REQ can also compare the ID AAC in the Pub _AAC and the ID _AAC in the AACAuth. The consistency of ID _AAC is verified, or the consistency of ID _AAC in Pub _AAC and ID _AAC in AACInit is verified; if the verification is passed, REQ determines the identity authentication result of AAC according to Res _AAC in Pub _AAC .

In the above embodiment, before S101, the first message AACInit sent by the AAC to the REQ may also include the security capability parameter information Security capabilites _{AAC supported by the AAC} , and the Security capabilites _AAC includes the identity authentication suite supported by the AAC (the identity authentication suite includes a One or more identification methods), etc., so that REQ selects the specific security policy used by REQ according to the Security capabilites _AAC Security capabilites _REQ , Security capabilites _REQ means that REQ determines the identification method used accordingly. Correspondingly, the REQInit of S101 further includes the Security capabilites _REQ , and the AAC can determine the security policy used in this authentication process according to the Security capabilites _REQ . The embodiment of the present application also provides a method for determining the first authentication server and/or the second authentication server used in this authentication process by utilizing the information exchange between the AAC and the REQ:

An implementation manner is that the AAC actively sends the identity ID _{AS_AAC} of at least one authentication server it trusts to the REQ. For example, before S101, the first message AACInit sent by the AAC to the REQ also includes the ID _{AS_AAC} , then the REQ obtains the ID AS_AAC from the ID _{AS_AAC} Choose at least one identification server and be the identification server of self-trusted identification server as ID _{AS_REQ} , if choosing fails, then REQ will use the identification of at least one identification server of self-trust as ID _{AS_REQ} (wherein, choose successful corresponding non-roaming situation, choose The failure corresponds to the roaming situation), the ID _{AS_REQ} is added to the REQInit of S101 and sent to the AAC. Further, AAC can determine the first authentication server according to ID _{AS_AAC} and ID _{AS_REQ} . For example, AAC can determine whether there is at least one identical authentication server identity in ID _{AS_REQ} and ID _{AS_AAC} . If there is, it is a non-roaming situation. In the identification of at least one authentication server mutually trusted by REQ and AAC, determine the first authentication server participating in identity authentication; if it does not exist, it is a roaming situation, and AAC needs to determine the first authentication server AS-AAC participating in identity authentication according to ID _{AS_AAC} . AAC, and sends the ID _{AS_REQ} to the AS-AAC, so that the AS-AAC determines the second authentication server AS-REQ according to the ID _{AS_REQ} .

Another implementation is that the AAC does not need to send the ID _{AS_AAC} to the REQ, but the REQ actively sends the ID _{AS_REQ} of the at least one authentication server it trusts to the AAC. For example, the REQ adds the ID _{AS_REQ} to the REQInit of S101 and sends it to the AAC. AAC. The specific implementation of determining the first authentication server and/or the second authentication server participating in the identity authentication process according to the ID _{AS_REQ} and the identity ID _{AS_AAC} of the authentication server trusted by the AAC itself is the same as the previous implementation.

Since the authentication servers trusted by REQ and AAC can be the same or different, when the authentication servers trusted by REQ and AAC are the same, it is a non-roaming situation; when the authentication servers trusted by REQ and AAC are different, it is a roaming situation. Based on the foregoing embodiments, the following describes the identity authentication method of the embodiment of the present application in conjunction with the application scenarios of non-roaming and roaming, aiming at the following four situations: (1) In the case of non-roaming, the identity authentication method of Sig _REQ is verified by AAC; (2) ) In the case of non-roaming, AS-AAC verifies the identity authentication method of Sig _REQ ; (3) In the case of roaming, AAC verifies the identity authentication method of Sig _REQ ; (4) In the case of roaming, AS-REQ verifies the identity authentication method of Sig _REQ Identification method.

Referring to FIG. 2, it is an embodiment of the identity authentication method in the above-mentioned (1) situation, wherein AS-AAC (also AS-REQ) can be used to represent the authentication server jointly trusted by REQ and AAC. The identification method includes:

S201, AAC generates Nonce _AAC , and generates Security capabilites _AAC as required.

S202. The AAC sends the first message AACInit to the REQ.

The AACInit includes Nonce _AAC and Security capabilites _AAC . Among them, Security capabilites _AAC is an optional field, indicating the security capability parameter information supported by AAC, including the identity authentication suite supported by AAC (the same below).

S203. After REQ receives AACInit, perform the following operations (if there is no special description or logical relationship, the actions numbered in (1), (2)... The same as the full text), including:

(1), generate Nonce _REQ ;

(2), generate Security capabilites _REQ as needed;

(3), calculate and generate the digital signature Sig REQ of _REQ .

S204, REQ sends an identity message REQInit to the AAC.

The REQInit includes Nonce _AAC , Nonce _REQ , Security capabilites _REQ , ID _REQ , Cert _REQ and Sig _REQ . Wherein, Security capabilites _REQ is an optional field, whether REQ generates Security capabilites _REQ depends on whether the AACInit sent by AAC to REQ carries Security capabilites _AAC ; Security capabilites _REQ represents the selection of a specific security policy made by REQ according to Security capabilites _AAC , namely REQ Determine the identity authentication method used, etc. (the same below). The signature data of Sig _REQ includes other fields before Sig _REQ in REQInit; for example, when REQInit includes Nonce _AAC , Nonce _REQ , Security capabilites _REQ , ID _REQ , Cert _REQ and Sig _REQ in sequence, the signature data of Sig _REQ includes Nonce _AAC , Nonce _REQ , Security capabilites _REQ , ID _REQ and Cert _REQ . In this application, the object to be signed is referred to as signature data.

S205. After receiving REQInit, AAC performs the following operations, including:

(1) Check whether the Nonce _AAC in REQInit is consistent with the Nonce AAC generated by _AAC , if not, discard REQInit;

(2), calculate and generate the identity authentication code MIC AAC of the _AAC .

S206. The AAC sends the first authentication request message AACVeri to the AS-AAC.

The AACVeri includes ID _REQ , Cert _REQ , Nonce _REQ , ID _AAC , Nonce _AAC and MIC _AAC . Among them, ID _REQ , Cert _REQ , Nonce _REQ should be equal to the corresponding fields in REQInit; Nonce _AAC should be equal to Nonce AAC generated by _AAC ; MIC _AAC is AAC using the pre-shared key K _{AAC_AS} with AS-AAC, using the same as AS-AAC The agreed cryptographic algorithm is calculated and generated for other fields including MIC _AAC in AACVeri. For example, when AACVeri includes ID _REQ , Cert _REQ , Nonce _REQ , ID _AAC , Nonce _AAC and MIC _AAC in sequence, AAC uses the K _{AAC_AS} , using the cryptographic algorithm agreed with AS-AAC to calculate and generate MIC _AAC for information including ID _REQ , Cert _REQ , Nonce _REQ , ID _AAC , and Nonce _AAC .

S207, AS-AAC, after receiving AACVeri, perform the following operations, including: (1), verify that MIC _AAC obtains Res _AAC , and generate Pub _AAC according to the information including ID _AAC and Res _AAC ;

The process of verifying the MIC _AAC includes: the AS-AAC determines the pre-shared key K _{AAC_AS} and a cryptographic algorithm agreed with the AAC according to the ID _AAC in the AACVeri, and uses the K _{AAC_AS} to use the cryptographic algorithm to verify the pre-shared key K AAC_AS before the MIC _AAC in the AACVeri. Other fields calculate the MIC _AAC locally, and compare it with the received MIC _AAC . If they are the same, the MIC _AAC verification is passed, and AS-AAC determines that the AAC authentication result is legal. If they are different, the MIC _AAC verification fails. Passed, AS-AAC can have the following processing methods according to local policies, including: discarding AACVeri or judging that the identity authentication result of AAC is invalid, etc.

(2), verify the legitimacy of Cert _REQ to obtain Res _REQ , and generate Pub _REQ according to the information including Res _REQ and Cert _REQ ;

(3) Calculate the first message authentication code MIC _{AS_AAC} and the first digital signature Sig _{AS_AAC1} of the AS-AAC.

S208, the AS-AAC sends a first authentication response message ASVeri to the AAC.

The ASVeri includes ID _REQ , Nonce _REQ , Pub _AAC , Sig _{AS_AAC1} , ID _AAC , Nonce _AAC , Pub _REQ and MIC _{AS_AAC} . Among them, ID _REQ , Nonce _REQ , ID _AAC , and Nonce _AAC should be respectively equal to the corresponding fields in AACVeri. MIC _{AS_AAC} is generated by AS-AAC using the pre-shared key K _{AAC_AS} with AAC and using the cryptographic algorithm agreed with AAC to calculate and generate information including ID _AAC , Nonce _AAC , and Pub _REQ ; Sig _{AS_AAC1} is an AS-AAC pair including It is generated by calculation of signature data including ID _REQ , Nonce _REQ , and Pub _AAC .

S209. After AAC receives ASVeri, it performs the following operations, including:

(1), check whether ID _AAC and Nonce _AAC in ASVeri are the same as the Nonce _AAC generated by AAC's own identity ID _AAC and AAC respectively;

(2), verify MIC _{AS_AAC} ;

The process of verifying MIC _{AS_AAC} includes: AAC uses the pre-shared key K _{AAC_AS} with AS-AAC, and uses the cryptographic algorithm agreed with AS-AAC to calculate and generate MIC _{AS_AAC} for the information in ASVeri including ID _AAC , Nonce _AAC , and Pub _REQ . , and compare it with the received MIC _{AS_AAC} . If they are the same, the verification is passed, and if they are different, the verification fails.

(3), check whether the Cert _REQ in the Pub _REQ is the same as the Cert _REQ in the received REQInit;

(4), utilize Cert _REQ to verify Sig _REQ ;

(5), if any one step in the above-mentioned inspection and verification fails, then discard ASVeri immediately; after the above-mentioned inspection and verification pass, determine the identity authentication result of REQ according to Res _REQ in Pub _REQ ; if it is determined that REQ is illegal, then End the identification process.

S210. AAC sends a third authentication response message AACAuth to REQ.

The AACAuth includes ID _REQ , Nonce _REQ , Pub _AAC , Sig _{AS_AAC1} and ID _AAC . Among them, ID _REQ , Nonce _REQ , Pub _AAC , and Sig _{AS_AAC1 are} derived from ASVeri; ID _AAC is derived from AAC's own identity identifier ID _AAC .

S211. After receiving the AACAuth, REQ performs the following operations, including:

(1), check whether ID _REQ and Nonce _REQ are the same as the Nonce _REQ generated by REQ's own identity ID _REQ and REQ respectively;

(2) Check whether the ID AAC in the ID _AAC is the same as the ID _AAC in the Pub _AAC ;

(3), utilize the public key of AS-AAC to verify Sig _{AS_AAC1} ;

(4) If any one of the above checks and verifications fails, the AACAuth will be discarded immediately; after all the above checks and verifications are passed, the AAC's identity authentication result is determined according to the Res _AAC in the Pub _AAC .

Referring to FIG. 3, it is an embodiment of the identity authentication method in the above-mentioned (2) situation, wherein AS-AAC (also AS-REQ) may be used to represent the authentication server jointly trusted by REQ and AAC. The identification method includes:

S301, AAC generates Nonce _AAC , and generates Security capabilites _AAC as required.

S302. The AAC sends a first message AACInit to the REQ.

The AACInit includes Nonce _AAC and Security capabilites _AAC . Among them, Security capabilites _AAC is an optional field.

S303. After REQ receives AACInit, the following operations are performed, including:

(1), generate Nonce _REQ ;

(2), generate Security capabilites _REQ as needed;

(3), calculate and generate the digital signature Sig REQ of _REQ .

S304, REQ sends an identity message REQInit to the AAC.

The REQInit includes Nonce _AAC , Nonce _REQ , Security capabilites _REQ , ID _REQ , Cert _REQ and Sig _REQ . Among them, Security capabilites _REQ is an optional field. The signature data of Sig _REQ includes other fields before Sig _REQ in REQInit.

S305. After receiving REQInit, the AAC performs the following operations, including:

S306. The AAC sends a first authentication request message AACVeri to the AS-AAC.

Included in the AACVeri are REQInit, ID _AAC and MIC _AAC . The MIC _AAC is calculated and generated by the AAC using the pre-shared key K _{AAC_AS} with the AS-AAC and using the cryptographic algorithm agreed with the AS-AAC, including other fields in the AACVeri before the MIC _AAC .

S307. After receiving the AACVeri, AS-AAC performs the following operations, including:

(1), verify MIC _AAC and obtain Res _AAC , generate Pub _AAC according to the information including ID _AAC and Res _AAC ; Wherein, the verification process of MIC _AAC refers to the relevant description in the embodiment of Fig. 2;

(2), utilize the Cert _REQ in REQInit to verify Sig _REQ ; If the verification does not pass, then discard AACVeri;

(3), verify the legitimacy of Cert _REQ in REQInit to obtain Res _REQ , and generate Pub _{REQ according to the information including Res REQ} _;

(4) Calculate the first message authentication code MIC _{AS_AAC} and the first digital signature Sig _{AS_AAC1} of the AS-AAC.

S308, the AS-AAC sends the first authentication response message ASVeri to the AAC.

S309. After AAC receives ASVeri, it performs the following operations, including:

(2), verify MIC _{AS_AAC} ;

(3), if any one step in the above-mentioned inspection and verification fails, then discard ASVeri immediately; after the above-mentioned inspection and verification pass, determine the identity authentication result of REQ according to Res _REQ in Pub _REQ ; if it is determined that REQ is illegal, then End the identification process.

S310. AAC sends a third authentication response message AACAuth to REQ.

The AACAuth includes ID _REQ , Nonce _REQ , Pub _AAC , Sig _{AS_AAC1} and ID _AAC . Among them, ID _REQ , Nonce _REQ , Pub _AAC , and Sig _{AS_AAC1 are} derived from ASVeri.

S311. After receiving the AACAuth, REQ performs the following operations, including:

(3), utilize the public key of AS-AAC to verify Sig _{AS_AAC1} ;

Referring to Fig. 4, it is an embodiment of the identity authentication method under the above-mentioned (3) situation, and the identity authentication method includes:

S401, AAC generates Nonce _AAC , and generates Security capabilites _AAC as required.

S402. The AAC sends the first message AACInit to the REQ.

The AACInit includes Nonce _AAC , Security capabilites _AAC and ID _{AS_AAC} . Among them, Security capabilites _AAC and ID _{AS_AAC} are optional fields, and ID _{AS_AAC} represents the identity of at least one authentication server trusted by AAC, which is used to make REQ determine whether there is a mutually trusted authentication server (the same below) according to ID _{AS_AAC} .

S403. After REQ receives AACInit, the following operations are performed, including:

(1), generate Nonce _REQ ;

(2), generate ID _{AS_REQ} as needed;

(3), generate Security capabilites _REQ as needed;

(4), calculate and generate the digital signature Sig REQ of _REQ .

S404, REQ sends an identity message REQInit to the AAC.

The REQInit includes Nonce _AAC , Nonce _REQ , Security capabilites _REQ , ID _{AS_REQ} , ID _REQ , Cert _REQ and Sig _REQ . Among them, Nonce _AAC should be equal to the corresponding field in AACInit; Security capabilites _REQ and ID _{AS_REQ} are optional fields, and ID _{AS_REQ} represents the identity of at least one authentication server trusted by REQ. When ID _{AS_AAC} exists in AACInit, REQ tries to use its Select at least one authentication server that is the same as ID _{AS_AAC} in the trusted authentication servers as ID _{AS_REQ} , if the selection fails, then use at least one authentication server trusted by itself as ID _{AS_REQ} ; when ID _{AS_AAC} does not exist in AACInit, REQ will trust itself at least one authentication server as ID _{AS_REQ} (the same below). The signature data of Sig _REQ includes other fields before Sig _REQ in REQInit.

S405. After receiving REQInit, AAC performs the following operations, including:

(2), calculate and generate the identity authentication code MIC AAC of _AAC ;

(3) If REQInit carries ID _{AS_REQ} and AACInit carries ID _{AS_AAC} , then AAC judges whether ID _{AS_REQ} and ID _{AS_AAC} have at least one identical identification server identity. In the identity of an authentication server trusted by REQ and AAC, determine the first authentication server participating in identity authentication; if it does not exist, it is a roaming situation, and AAC needs to determine the first authentication server AS-AAC participating in identity authentication according to ID _{AS_AAC} , and send the ID _{AS_REQ} to the AS-AAC, so that the AS-AAC determines the second authentication server AS-REQ according to the ID _{AS_REQ} ; or,

If the ID _{AS_REQ} is carried in REQInit but the ID AS_AAC is not carried in _AACInit , the AAC determines whether the ID _{AS_REQ} and the authentication server trusted by the AAC have at least one identical ID of the authentication server. If so, it is a non-roaming situation. In the identification of at least one authentication server mutually trusted by REQ and AAC, determine the first authentication server participating in identity authentication; if it does not exist, it is a roaming situation, and AAC needs to determine the first authentication participating in identity authentication according to the authentication server trusted by itself. The server AS-AAC sends the ID _{AS_REQ} to the AS-AAC, so that the AS-AAC determines the second authentication server AS-REQ according to the ID _{AS_REQ} ;

It should be noted that the result determined in this embodiment should be a roaming situation.

S406. The AAC sends a first authentication request message AACVeri to the AS-AAC.

The AACVeri includes Nonce _REQ , ID _{AS_REQ} , ID _REQ , Cert _REQ , ID _AAC , Nonce _AAC and MIC _AAC . Among them, Nonce _REQ , ID _{AS_REQ} , ID _REQ , and Cert _REQ should be respectively equal to the corresponding fields in REQInit; Nonce _AAC should be equal to Nonce AAC generated by _AAC ; ID _{AS_REQ} is an optional field. MIC _AAC is a hash value calculated and generated by AAC using the pre-shared key K _{AAC_AS} with AS-AAC, and using the hash algorithm agreed with AS-AAC, including other fields before MIC _AAC in AACVeri.

S407. After receiving the AACVeri, AS-AAC performs the following operations, including:

(1), verify MIC _AAC to obtain Res _AAC , generate Pub _AAC according to the information including Res _AAC and ID _AAC ; Wherein, the verification process is described with reference to the relevant content of the embodiment of Fig. 2;

(2), calculate and generate the second digital signature Sig _{AS_AAC2} .

S408, AS-AAC sends a second authentication request message AS-AACVeri to AS-REQ.

The AS-AACVeri includes Nonce _REQ , ID _REQ , Cert _REQ , ID _AAC , Nonce _AAC , Pub _AAC and Sig _{AS_AAC2} . The signature data of Sig _{AS_AAC2} includes other fields before Sig _{AS_AAC2} in AS-AACVeri.

S409. After the AS-REQ receives the AS-AACVeri, the following operations are performed, including:

(1), utilize the public key of AS-AAC to verify Sig _{AS_AAC2} ; If the verification fails, then discard AS-AACVeri;

(2), verify the legitimacy of Cert _REQ to obtain Res _REQ , and generate Pub _REQ according to the information including Cert _REQ and Res _REQ ;

(3) Calculate the first digital signature Sig _{AS_REQ1} and the third digital signature Sig _{AS_REQ3} .

S410. The AS-REQ sends a second authentication response message AS-REQVeri to the AS-AAC.

The AS-REQVeri includes ID _REQ , Nonce _REQ , Pub _AAC , Sig _{AS_REQ1} , ID _AAC , Nonce _AAC , Pub _REQ and Sig _{AS_REQ3} . Among them, ID _REQ , Nonce _REQ , Pub _AAC , ID _AAC , and Nonce _AAC should be respectively equal to the corresponding fields in AS-AACVeri. Sig _{AS_REQ1} is generated by AS-REQ on signature data including ID _REQ , Nonce _REQ , and Pub _AAC ; Sig _{AS_REQ3} is generated by AS-REQ on signature data including ID _AAC , Nonce _AAC , and Pub _REQ .

S411. After the AS-AAC receives the AS-REQVeri, the following operations are performed, including:

(1), utilize the public key of AS-REQ to verify Sig _{AS_REQ3} ; If the verification fails, then discard AS-REQVeri;

(2) Calculate the first message authentication code MIC _{AS_AAC} of the AS-AAC.

S412. The AS-AAC sends the first authentication response message ASVeri to the AAC.

The ASVeri includes ID _REQ , Nonce _REQ , Pub _AAC , Sig _{AS_REQ1} , ID _AAC , Nonce _AAC , Pub _REQ and MIC _{AS_AAC} . Among them, ID _REQ , Nonce _REQ , Pub _AAC , Sig _{AS_REQ1} , ID _AAC , Nonce _AAC , and Pub _REQ should be respectively equal to the corresponding fields in AS-REQVeri; MIC _{AS_AAC} is the pre-shared key K _{AAC_AS} used by AS-AAC and AAC, Use the hash algorithm agreed with AAC to calculate the generated hash value for information including ID _AAC , Nonce _AAC , and Pub _REQ .

S413. After AAC receives ASVeri, it performs the following operations, including:

(2), verify MIC _{AS_AAC} ; The verification process is described with reference to the relevant content of the embodiment shown in Figure 2;

(4), utilize Cert _REQ to verify Sig _REQ ;

S414, AAC sends a third authentication response message AACAuth to REQ.

The AACAuth includes ID _REQ , Nonce _REQ , Pub _AAC , Sig _{AS_REQ1} and ID _AAC . Among them, ID _REQ , Nonce _REQ , Pub _AAC , and Sig _{AS_REQ1 are} derived from ASVeri; ID _AAC is derived from AAC's own identity identifier ID _AAC .

S415. After receiving the AACAuth, REQ performs the following operations, including:

(3), utilize the public key of AS-REQ to verify Sig _{AS_REQ1} ;

It should be noted that the second digital signature Sig _{AS_AAC2} in S407 and S408 can be replaced with the second message authentication code MIC _{AS_AAC2} , wherein MIC _{AS_AAC2} is the pre-shared key used by AS-AAC with AS-REQ, and the The hash algorithm agreed by REQ includes the hash value calculated by other fields before MIC _{AS_AAC2} in AS-AACVeri; then in S409, the AS-REQ verification Sig _{AS_AAC2} is replaced by the verification MIC _{AS_AAC2} . The third digital signature Sig _{AS_REQ3} in S409 and S410 can be replaced with a third message authentication code MIC _{AS_REQ3} , wherein MIC _{AS_REQ3} is the hash algorithm agreed with AS-AAC by AS-REQ using the pre-shared key with AS-AAC The hash value calculated for the fields including ID _AAC , Nonce _AAC , and Pub _REQ in AS-REQVeri; then in S411, the AS-AAC verification Sig _{AS_REQ3} is replaced by the verification MIC _{AS_REQ3} .

Referring to Fig. 5, it is an embodiment of the identity authentication method under the above-mentioned (4) situation, and the identity authentication method includes:

S501, AAC generates Nonce _AAC , and generates Security capabilites _AAC as required.

S502. The AAC sends the first message AACInit to the REQ.

The AACInit includes Nonce _AAC , Security capabilites _AAC and ID _{AS_AAC} . Among them, Security capabilites _AAC and ID _{AS_AAC} are optional fields.

S503. After REQ receives AACInit, the following operations are performed, including:

(1), generate Nonce _REQ ;

(2), generate ID _{AS_REQ} as needed;

(3), generate Security capabilites _REQ as needed;

(4), calculate and generate the digital signature Sig REQ of _REQ .

S504, REQ sends an identity message REQInit to the AAC.

The REQInit includes Nonce _AAC , Nonce _REQ , Security capabilites _REQ , ID _{AS_REQ} , ID _REQ , Cert _REQ and Sig _REQ . Among them, Nonce _AAC should be equal to the corresponding field in AACInit; Security capabilites _REQ and ID _{AS_REQ} are optional fields; the signature data of Sig _REQ includes other fields before Sig _REQ in REQInit.

S505, AAC receives REQInit, and performs the following operations, including:

(2), calculate and generate the identity authentication code MIC AAC of _AAC ;

(3), AAC determines the first authentication server AS-AAC that participates in identity authentication, and AS-AAC determines the second authentication server AS-REQ with the relevant description in Embodiment 4; it should be noted that the result judged by this embodiment Should be a roaming situation.

S506. The AAC sends the first authentication request message AACVeri to the AS-AAC.

Included in the AACVeri are REQInit, ID _AAC and MIC _AAC . The MIC _AAC is a hash value calculated and generated by the AAC using the pre-shared key K _{AAC_AS} with the AS-AAC, and using the hash algorithm agreed with the AS-AAC, including other fields before the MIC _AAC in the AACVeri.

S507. After receiving the AACVeri, AS-AAC performs the following operations, including:

(2), calculate and generate the second digital signature Sig _{AS_AAC2} .

S508, AS-AAC sends a second authentication request message AS-AACVeri to AS-REQ.

The AS-AACVeri includes REQInit, ID _AAC , Pub _AAC and Sig _{AS_AAC2} . The signature data of Sig _{AS_AAC2} includes other fields before Sig _{AS_AAC2} in AS-AACVeri.

S509. After receiving the AS-AACVeri, the AS-REQ performs the following operations, including:

(1), use the public key of AS-AAC to verify Sig _{AS_AAC2} , and, use Cert _REQ in REQInit to verify Sig _REQ , if the verification fails, then discard AS-AACVeri;

(2), verify the legitimacy of Cert _REQ to obtain Res _REQ , and generate Pub _{REQ according to the information including Res REQ} _;

S510. The AS-REQ sends the second authentication response message AS-REQVeri to the AS-AAC.

S511. After receiving the AS-REQVeri, the AS-AAC performs the following operations, including:

S512. The AS-AAC sends a first authentication response message ASVeri to the AAC.

S513. After the AAC receives the ASVeri, it performs the following operations, including:

(2), verify MIC _{AS_AAC} ; The verification process is described with reference to the relevant content of the embodiment of Fig. 3;

(3), if any one step in the above-mentioned inspection and verification fails, then discard ASVeri immediately; after the above-mentioned inspection and verification pass, determine the identity authentication result of REQ according to Res _REQ in Pub _REQ ; if it is determined that REQ is illegal, then End this identification process.

S514. AAC sends a third authentication response message AACAuth to REQ.

S515. After receiving the AACAuth, REQ performs the following operations, including:

(3), utilize the public key of AS-REQ to verify Sig _{AS_REQ1} ;

(4) After the above checks and verifications are passed, the identity authentication result of AAC is determined according to Res _AAC in Pub _AAC ; if any step of the above checks and verifications fails, AACAuth is immediately discarded.

It should be noted that the second digital signature Sig _{AS_AAC2} in S507 and S508 can be replaced by the second message authentication code MIC _{AS_AAC2} , wherein MIC _{AS_AAC2} is the pre-shared key used by AS-AAC with AS-REQ, and the The hash algorithm agreed by REQ includes the hash value calculated by other fields before MIC _{AS_AAC2} in AS-AACVeri; then in S509, the AS-REQ verification Sig _{AS_AAC2} is replaced by the verification MIC _{AS_AAC2} . The third digital signature Sig _{AS_REQ3} in S509 and S510 can be replaced with a third message authentication code MIC _{AS_REQ3} , wherein MIC _{AS_REQ3} is the hash algorithm agreed with AS-AAC by AS-REQ using the pre-shared key with AS-AAC The hash value calculated for the fields including ID _AAC , Nonce _AAC , and Pub _REQ in AS-REQVeri; then in S511, the AS-AAC verification Sig _{AS_REQ3} is replaced by the verification MIC _{AS_REQ3} .

In each of the above embodiments, each message may also carry a hash value HASH _{X_Y} , and the hash value HASH _{X_Y} is calculated by the sender entity X of the message using the hash algorithm on the latest pre-order message sent by the peer entity Y received. obtained, which is used by the peer entity Y to verify whether the entity X has received the complete latest pre-order message. Among them, HASH _{REQ_AAC} represents the hash value calculated by REQ on the latest pre-order message sent by the received AAC, HASH _{AAC_REQ} represents the hash value calculated by AAC on the latest pre-order message sent by the received REQ, and HASH _{AAC_AS-AAC} represents the hash value calculated by AAC on the received Hash value calculated by the latest pre-order message sent by the received AS-AAC, HASH _{AS-AAC_AAC} represents the hash value calculated by AS-AAC on the latest pre-order message sent by the received AAC, HASH _{AS-AAC_AS-REQ} represents the AS-AAC Hash value calculated for the latest pre-order message sent by AS-REQ, HASH _{AS-REQ_AS-AAC} indicates the hash value calculated by AS-REQ for the latest pre-order message sent by AS-AAC. If the message currently sent by the sender entity X is the first message in the interaction between entity X and entity Y, it means that entity X has not received the pre-order message sent by the peer entity Y, then HASH _{X_Y} may not exist in the message or meaningless.

Correspondingly, after the peer entity Y receives the message sent by the entity X, if the message contains HASH _{X_Y} , then when the entity Y has not sent the preorder message to the entity X, the entity Y ignores the HASH _{X_Y} ; When sending a pre-order message to entity X, entity Y uses the hash algorithm to calculate the hash value locally for the latest pre-order message previously sent to entity X, and compares it with the hash value HASH _{X_Y} carried in the received message. If they are consistent, Then execute the following steps, otherwise discard or end the current authentication process.

In the present invention, for the entity X, the pre-order message sent by the peer entity Y to the entity X refers to the received message M sent by the peer entity Y to the entity X before the entity X sends the message M to the peer entity Y. Message; the latest pre-order message sent by peer entity Y to entity X refers to the latest message sent by peer entity Y to entity X before entity X sends message M to peer entity Y. If the message M sent by entity X to its peer entity Y is the first message exchanged between entity X and entity Y, then there is no peer entity Y to the entity before entity X sends message M to its peer entity Y The preorder message sent by X.

The optional fields and optional operations in the embodiments corresponding to the above-mentioned FIGS. 2 to 5 are denoted by “*” in FIGS. 2 to 5 of the accompanying drawings in the specification. The contents included in the messages involved in all the above embodiments are not limited in order, and unless otherwise specified, the order in which the message receiver performs operations on the related messages after receiving the message and the contents included in the message is not limited. order of processing.

Based on the method embodiments corresponding to FIG. 1 to FIG. 5, referring to FIG. 6, an embodiment of the present application further provides a requesting device 600, including:

a sending module 610, configured to send an identity message to the authentication access controller, where the identity message includes the digital certificate of the requesting device;

The receiving module 620 is configured to receive a third authentication response message sent by the authentication access controller, where the third authentication response message includes first authentication result information and a first digital signature; in the first authentication result information Including the first verification result of the authentication access controller, and the first digital signature is a number generated by the second authentication server trusted by the requesting device to the signature data including the first authentication result information. sign;

a verification module 630, configured to use the public key of the second authentication server to verify the first digital signature;

The determining module 640 is configured to determine the identity authentication result of the authentication access controller according to the first authentication result in the first authentication result information if the authentication is passed.

Optionally, the receiving module 620 is further configured to: before the sending module 610 sends the identity message to the authentication access controller, receive a first message sent by the authentication access controller, where the first message includes the authentication access controller. The first random number generated by the access controller; then the identity message also includes the first random number.

Optionally, the first message further includes security capability parameter information supported by the authentication access controller; the determining module 640 is further configured to: determine a specific security policy used by the requesting device according to the security capability parameter information ; then the identity message also includes the specific security policy.

Optionally, the first message also includes an identity identifier of at least one authentication server trusted by the authentication access controller; the determining module 640 is further configured to: according to the at least one authentication server trusted by the authentication access controller to determine the identity of at least one authentication server trusted by the requesting device; then the identity message also includes the identity of at least one authentication server trusted by the requesting device.

Optionally, the identity message sent by the sending module 610 further includes an identity identifier of at least one authentication server trusted by the requesting device.

Optionally, the identity message also includes the identity of the requesting device and/or the second random number generated by the requesting device; then the third authentication response message also includes the identity of the requesting device. and/or the second random number; the verification module 630 is further configured to: before the determination module 640 determines the identity authentication result of the authentication access controller, verify the identity of the requesting device in the third authentication response message. Verify the consistency between the identity identifier and the identity identifier of the requesting device itself, and/or verify the consistency between the second random number in the third authentication response message and the second random number generated by the requesting device sex is verified.

Optionally, the first authentication result information further includes the identity identification of the authentication access controller; the verification module 630 is further configured to: before the determination module 640 determines the identity authentication result of the authentication access controller, Verifying the consistency between the identity of the authentication access controller in the first authentication result information and the identity of the authentication access controller carried in the third authentication response message; or, to The consistency of the identity identifier of the authentication access controller in the first authentication result information and the identity identifier of the authentication access controller carried in the first message is verified.

Optionally, the message sent by the requesting device to the authentication access controller further includes a hash value calculated by the requesting device on the received latest pre-order message sent by the authentication access controller.

Referring to FIG. 7 , an embodiment of the present application further provides an authentication access controller 700, including:

a receiving module 710, configured to receive an identity message sent by a requesting device, where the identity message includes a digital certificate of the requesting device;

The generating module 720 is configured to utilize the pre-shared key of the first authentication server trusted by the authentication access controller, and adopt the cryptographic algorithm agreed with the first authentication server to perform a pair of digital certificates including the requesting device. The information is calculated to generate the identity authentication code of the authentication access controller;

A sending module 730, configured to send a first authentication request message to the first authentication server, where the first authentication request message includes the digital certificate of the requesting device and the identity authentication code of the authentication access controller;

The receiving module 710 is further configured to receive a first authentication response message sent by the first authentication server, where the first authentication response message includes first authentication result information and the first number of the second authentication server trusted by the requesting device. signature, the second authentication result information and the first message authentication code of the first authentication server; the first authentication result information includes the first verification result of the identity authentication code of the authentication access controller, the The first digital signature is a digital signature calculated and generated by the second authentication server on the signature data including the first authentication result information, and the second authentication result information includes the first authentication result of the digital certificate of the requesting device. The second verification result, the first message authentication code of the first authentication server is that the first authentication server uses the pre-shared key with the authentication access controller, and adopts the password agreed with the authentication access controller. The algorithm calculates and generates the information including the second identification result information;

The verification module 740 is configured to use the pre-shared key with the first authentication server to verify the first message authentication code of the first authentication server by adopting the cryptographic algorithm agreed with the first authentication server, if the verification is passed, Then the determination module 750 determines the identity authentication result of the requesting device according to the second verification result in the second authentication result information; when the determination module 750 determines that the authentication result of the requesting device is legal, the sending module 730 sends the request device to the requesting device. The requesting device sends a third authentication response message; or,

The verification module 740 is configured to use the pre-shared key with the first authentication server to verify the first message authentication code of the first authentication server by adopting the cryptographic algorithm agreed with the first authentication server, if the verification is passed, Then the sending module 730 sends a third authentication response message to the requesting device and the determining module 750 determines the identity authentication result of the requesting device according to the second authentication result in the second authentication result information; or,

The verification module 740 is configured to use the pre-shared key with the first authentication server to verify the first message authentication code of the first authentication server by adopting the cryptographic algorithm agreed with the first authentication server; If the first message authentication code of the authentication server passes the authentication, the determination module 750 determines the identity authentication result of the requesting device according to the second authentication result in the second authentication result information; the sending module 730 sends the first message to the requesting device. three authentication response messages;

Optionally, the sending module 730 is further configured to: before the receiving module 710 receives the identity message sent by the requesting device, send a first message to the requesting device, where the first message includes the identity message generated by the authentication access controller. the first random number; then the identity message also includes the first random number;

The verification module 740 is further configured to: after the receiving module 710 receives the identity message, verify the consistency of the first random number in the identity message and the first random number generated by the authentication access controller.

Optionally, the first message further includes the identity of at least one authentication server trusted by the authentication access controller; the identity message also includes the identity of at least one authentication server trusted by the requesting device; The determining module 750 is further configured to: according to the identity of at least one authentication server trusted by the requesting device in the identity message and the identity of at least one authentication server trusted by the authentication access controller in the first message , and determine the first authentication server.

Optionally, the identity message also includes the identity of at least one authentication server trusted by the requesting device; the determining module 750 is further configured to: according to the identity of the at least one authentication server trusted by the requesting device and the authentication The identity identifier of the authentication server trusted by the access controller determines the first authentication server.

Optionally, the first authentication request message further includes the identity of the authentication access controller and/or the first random number generated by the authentication access controller; correspondingly, the first authentication response The message also includes the identity identification of the authentication access controller and/or the first random number; then the verification module 740 is further configured to: before the determination module 750 determines the identity authentication result of the requesting device, verify the identity of the requesting device. The consistency of the identity of the authentication access controller in the first authentication response message and the identity of the authentication access controller itself is verified, and/or, all the information in the first authentication response message is verified. The consistency of the first random number and the first random number generated by the authentication access controller is verified.

Optionally, the identity message also includes the digital signature of the requesting device, and the determining module 750 is specifically configured to: before the determining module 750 determines the identity authentication result of the requesting device, determine the digital signature of the requesting device. Whether the verification is passed, if it is determined that the digital signature verification of the requesting device is passed, then the identity authentication result of the requesting device is determined according to the second verification result in the second authentication result information.

Optionally, the determining module 750 determines whether the digital signature of the requesting device has passed the verification, specifically including:

The second authentication server verifies the digital signature of the requesting device by using the digital certificate of the requesting device. If the receiving module 710 receives the first authentication response message, the determining module 750 determines the The digital signature has been verified; or,

The determining module 750 verifies the digital signature of the requesting device by using the digital certificate of the requesting device in the identity message, and determines whether the digital signature of the requesting device is verified according to the verification result; or,

When the second authentication result information further includes the digital certificate of the requesting device, the determining module 750 verifies the digital signature of the requesting device by using the digital certificate of the requesting device in the second authentication result information , according to the verification result, determine whether the digital signature of the requesting device is verified; or,

When the second authentication result information further includes the digital certificate of the requesting device, the determining module 750 verifies the digital certificate of the requesting device in the second authentication result information and the request in the identity message The digital certificates of the devices are consistent; if they are consistent, the digital signature of the requesting device is verified using the digital certificate of the requesting device, and whether the digital signature of the requesting device is verified is determined according to the verification result.

Optionally, the message sent by the authentication access controller to the requesting device further includes a hash value calculated by the authentication access controller on the received latest pre-order message sent by the requesting device; the authentication The message sent by the access controller to the first authentication server further includes a hash value calculated by the authentication access controller on the received latest pre-order message sent by the first authentication server.

Referring to FIG. 8, an embodiment of the present application further provides a first authentication server 800, including:

The receiving module 810 is configured to receive a first authentication request message sent by the authentication access controller, where the first authentication request message includes the digital certificate of the requesting device and the identity authentication code of the authentication access controller; the authentication The identity authentication code of the access controller is that the authentication access controller uses the pre-shared key with the first authentication server, and adopts the cryptographic algorithm agreed with the first authentication server to pair the number including the requesting device. The information including the certificate is calculated and generated;

The sending module 820 is configured to send a first authentication response message to the authentication access controller, where the first authentication response message includes first authentication result information and the first number of the second authentication server trusted by the requesting device signature, the second authentication result information and the first message authentication code of the first authentication server; the first authentication result information includes the first verification result of the identity authentication code of the authentication access controller, the The first digital signature is a digital signature calculated and generated by the second authentication server on the signature data including the first authentication result information, and the second authentication result information includes the first authentication result of the digital certificate of the requesting device. The second verification result, the first message authentication code of the first authentication server is that the first authentication server uses the pre-shared key with the authentication access controller, and adopts the password agreed with the authentication access controller. The algorithm calculates and generates the information including the second authentication result information.

Optionally, the first authentication server 800 further includes:

a first verification module, configured to verify the identity authentication code of the authentication access controller to obtain a first verification result, and perform legality verification on the digital certificate of the requesting device to obtain a second verification result;

The first generation module is configured to generate the first identification result information according to the information including the first verification result, generate the second identification result information according to the information including the second verification result, The information including the second authentication result information is calculated to generate the first message authentication code of the first authentication server, and the signature data including the first authentication result information is calculated to generate the first digital signature;

A second generating module, configured to generate the first authentication response according to information including the first authentication result information, the first digital signature, the second authentication result information and the first message authentication code information.

Optionally, the first authentication server 800 further includes:

a second verification module, configured to verify the identity authentication code of the authentication access controller to obtain a first verification result;

a third generation module, configured to generate the first authentication result information according to the information including the first verification result, and to generate the signature data including the first authentication result information and the digital certificate of the requesting device Calculate and generate a second digital signature or use the pre-shared key with the second authentication server, and use the cryptographic algorithm agreed with the second authentication server to pair the digital certificate including the first authentication result information and the requesting device generating a second message authentication code by calculating the information inside;

The sending module 820 is further configured to send a second authentication request message to the second authentication server, where the second authentication request message includes the first authentication result information, the digital certificate of the requesting device and the second digital The signature or the second authentication request message includes the first authentication result information, the digital certificate of the requesting device and the second message authentication code;

The receiving module 810 is further configured to receive a second authentication response message sent by the second authentication server, where the second authentication response message includes the first authentication result information, the first digital signature, and the second authentication The result information and the third digital signature or the second authentication response message include the first authentication result information, the first digital signature, the second authentication result information and the third message authentication code; the second authentication result information The authentication result information is that the second authentication server verifies the digital certificate of the requesting device to obtain a second verification result, and is generated according to the information including the second verification result; the first digital signature is the The second authentication server calculates and generates the signature data including the first authentication result information; the third digital signature is calculated by the second authentication server on the signature data including the second authentication result information The third message authentication code is generated, or the third message authentication code is the second authentication server using the pre-shared key with the first authentication server, using the cryptographic algorithm agreed with the first authentication server to include the second authentication server. It is generated by information calculation including the authentication result information;

The third verification module is used to verify the third digital signature by using the public key of the second authentication server or use the pre-shared key with the second authentication server, and use the password agreed with the second authentication server an algorithm verifies the third message authentication code;

The fourth generation module is used to calculate and generate the first message authentication code for the information including the second authentication result information, if the verification is passed, according to the information including the first authentication result information, the first number Information including the signature, the second authentication result information, and the first message authentication code generates the first authentication response message.

Optionally, the message sent by the first authentication server to the authentication access controller further includes a hash value calculated by the first authentication server on the received latest pre-order message sent by the authentication access controller. ; The message sent by the first authentication server to the second authentication server further includes a hash value calculated by the first authentication server for the latest pre-order message sent by the second authentication server received.

Referring to FIG. 9, an embodiment of the present application further provides a second authentication server 900, including:

The receiving module 910 is configured to receive a second authentication request message sent by the first authentication server, where the second authentication request message includes the first authentication result information, the digital certificate of the requesting device and the second digital signature or the second authentication The request message includes the first authentication result information, the digital certificate of the requesting device and the second message authentication code; the first authentication result information is obtained by the first authentication server verifying the identity authentication code of the access controller. The first verification result is generated according to the information including the first verification result; the second digital signature is a digital signature that includes the first verification result information and the requesting device signed by the first verification server. The signature data including the certificate is calculated and generated, or the second message authentication code is the password agreed with the second authentication server by the first authentication server using the pre-shared key with the second authentication server. The algorithm calculates and generates the information including the first authentication result information and the digital certificate of the requesting device;

The verification module 920 is configured to use the public key of the first authentication server to verify the second digital signature or use the pre-shared key with the first authentication server, and use the cryptographic algorithm agreed with the first authentication server Verifying the second message authentication code, and if the verification passes, performing legality verification on the digital certificate of the requesting device to obtain a second verification result;

The generating module 930 is configured to generate second authentication result information according to the information including the second verification result, calculate and generate a first digital signature for the signature data including the first authentication result information, and generate a first digital signature for the information including the first authentication result. The signature data including the second authentication result information is calculated to generate a third digital signature or the pre-shared key with the first authentication server is used, and the cryptographic algorithm agreed with the first authentication server is used to perform the second authentication Information calculation including the result information generates a third message authentication code;

The sending module 940 is configured to send a second authentication response message to the first authentication server, where the second authentication response message includes the first authentication result information, the first digital signature, and the second authentication result The information and the third digital signature or the second authentication response message include the first authentication result information, the first digital signature, the second authentication result information and the third message authentication code.

Optionally, the message sent by the second authentication server to the first authentication server further includes a hash value calculated by the second authentication server on the received latest pre-order message sent by the first authentication server.

Referring to FIG. 10 , an embodiment of the present application further provides a requesting device, including:

a memory 1001 for storing program instructions;

The processor 1002 is configured to call the program instructions stored in the memory 1001, and execute according to the obtained program to realize the steps of REQ execution in the foregoing embodiment.

It should be understood that the requesting device may implement the corresponding processes implemented by REQ in each method of the embodiments of the present application, which will not be repeated here for brevity.

Referring to FIG. 11 , an embodiment of the present application further provides an authentication access controller, including:

a memory 1101 for storing program instructions;

The processor 1102 is configured to call the program instructions stored in the memory 1101, and execute according to the obtained program to realize the steps of the AAC execution in the foregoing embodiment.

It should be understood that the authentication access controller may implement the corresponding processes implemented by the AAC in the various methods in the embodiments of the present application, which will not be repeated here for brevity.

Referring to FIG. 12, an embodiment of the present application further provides a first authentication server, including:

a memory 1201 for storing program instructions;

The processor 1202 is configured to call the program instructions stored in the memory 1201, and execute the obtained program to realize the steps performed by the AS-AAC in the foregoing embodiment.

It should be understood that the first authentication server may implement the corresponding processes implemented by the AS-AAC in each method in the embodiments of the present application, and for brevity, details are not described herein again.

Referring to FIG. 13, an embodiment of the present application further provides a second authentication server, including:

memory 1301 for storing program instructions;

The processor 1302 is configured to call the program instructions stored in the memory 1301, and execute according to the obtained program to realize the steps performed by the AS-REQ in the foregoing embodiment.

It should be understood that the second authentication server may implement the corresponding processes implemented by the AS-REQ in each method in the embodiments of the present application, which will not be repeated here for brevity.

Those of ordinary skill in the art can understand that all or part of the steps of implementing the above method embodiments may be completed by program instructions related to hardware, the aforementioned program may be stored in a computer-readable storage medium, and when the program is executed, the execution includes the above The steps of the method embodiment; and the aforementioned storage medium may be at least one of the following media: read-only memory (English: Read-Only Memory, abbreviation: ROM), RAM, magnetic disk or optical disk and other various programs that can store programs medium of code.

It should be noted that each embodiment in this specification is described in a progressive manner, and the same and similar parts between the various embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. place. In particular, for the device and system embodiments, since they are consistent with and correspond to the method embodiments, the description is relatively simple, and reference may be made to some descriptions of the method embodiments for related parts. The device and system embodiments described above are only schematic, wherein the modules described as separate components may or may not be physically separated, and the components displayed as modules may or may not be physical modules, that is, they may be located in One place, or it can be distributed over multiple network elements. Some or all of the modules may be selected according to actual needs to achieve the purpose of the solution in this embodiment. Those of ordinary skill in the art can understand and implement it without creative effort.

The above is only a specific embodiment of the present application, but the protection scope of the present application is not limited to this. Substitutions should be covered within the protection scope of this application. Therefore, the protection scope of the present application should be subject to the protection scope of the claims.

Claims

An identity authentication method, characterized in that the method comprises:

The authentication access controller receives the identity message sent by the requesting device, and the identity message includes the digital certificate of the requesting device;

The authentication access controller sends a first authentication request message to its trusted first authentication server, where the first authentication request message includes the digital certificate of the requesting device and the identity authentication code of the authentication access controller , the identity authentication code of the authentication access controller is that the authentication access controller uses the pre-shared key with the first authentication server, adopts the cryptographic algorithm agreed with the first authentication server to Calculated from the information including the digital certificate of the requesting device;

The authentication access controller receives a first authentication response message sent by the first authentication server, where the first authentication response message includes first authentication result information and the first authentication result of the second authentication server trusted by the requesting device. The digital signature, the second authentication result information, and the first message authentication code of the first authentication server, where the first authentication result information includes the first verification result of the identity authentication code of the authentication access controller, so The first digital signature is a digital signature calculated and generated by the second authentication server on the signature data including the first authentication result information, and the second authentication result information includes information about the digital certificate of the requesting device. In the second verification result, the first message authentication code of the first authentication server is that the first authentication server uses the pre-shared key with the authentication access controller and adopts the pre-shared key agreed with the authentication access controller. The cryptographic algorithm calculates and generates the information including the second authentication result information;

The authentication access controller uses the pre-shared key with the first authentication server, and uses the cryptographic algorithm agreed with the first authentication server to verify the first message authentication code of the first authentication server. If the verification passes , then the authentication access controller determines the identity authentication result of the requesting device according to the second verification result in the second authentication result information, and when the authentication access controller determines the identity authentication result of the requesting device When it is valid, send a third authentication response message to the requesting device; or,

The authentication access controller uses the pre-shared key with the first authentication server, and uses the cryptographic algorithm agreed with the first authentication server to verify the first message authentication code of the first authentication server. If the verification passes , then the authentication access controller sends a third authentication response message to the requesting device and determines the identity authentication result of the requesting device according to the second verification result in the second authentication result information; or,

The authentication access controller uses the pre-shared key with the first authentication server, and uses the cryptographic algorithm agreed with the first authentication server to verify the first message authentication code of the first authentication server; if the If the first message authentication code of the first authentication server passes the authentication, the authentication access controller determines the identity authentication result of the requesting device according to the second authentication result in the second authentication result information; the authentication access controller the controller sends a third authentication response message to the requesting device;

Wherein, the third authentication response message includes the first authentication result information and the first digital signature;

After receiving the third authentication response message, the requesting device verifies the first digital signature by using the public key of the second authentication server. The first verification result determines the identity authentication result of the authentication access controller.
The method according to claim 1, wherein before the authentication access controller receives the identity message sent by the requesting device, the method further comprises:

sending, by the authentication access controller, a first message to the requesting device, where the first message includes a first random number generated by the authentication access controller;

then the identity message also includes the first random number;

Then, after receiving the identity message, the authentication access controller verifies the consistency of the first random number in the identity message and the first random number generated by the authentication access controller;

If the verification is passed, the authentication access controller sends the first authentication request message again.
The method according to claim 2, wherein the first message further includes security capability parameter information supported by the authentication access controller, and the method further includes:

determining, by the requesting device, a specific security policy used by the requesting device according to the security capability parameter information;

Then the identity message also includes the specific security policy.
The method according to claim 2, wherein the first message further includes an identity identifier of at least one authentication server trusted by the authentication access controller, and the method further includes:

The requesting device determines the identity of at least one authentication server trusted by the requesting device according to the identity of at least one authentication server trusted by the authentication access controller;

The identity message also includes an identity identifier of at least one authentication server trusted by the requesting device, and the method further includes:

The authentication access controller determines according to the identity of the at least one authentication server trusted by the requesting device in the identity message and the identity of the at least one authentication server trusted by the authentication access controller in the first message. the first authentication server.
The method according to claim 1, wherein the identity message further includes an identity identifier of at least one authentication server trusted by the requesting device, and the method further comprises:

The authentication access controller determines the first authentication server according to the identity of at least one authentication server trusted by the requesting device and the identity of the authentication server trusted by the authentication access controller.
The method according to claim 2, wherein the first authentication request message further includes the identity of the authentication access controller and/or the first random number generated by the authentication access controller;

Correspondingly, the first authentication response message further includes the identity identifier of the authentication access controller and/or the first random number;

Then, before the authentication access controller determines the identity authentication result of the requesting device, the method further includes:

The authentication access controller verifies the consistency of the identity identifier of the authentication access controller in the first authentication response message and the identity identifier of the authentication access controller itself, and/or, verifies the identity of the authentication access controller. The consistency of the first random number in the first authentication response message and the first random number generated by the authentication access controller is verified, and it is determined that the consistency verification passes.
The method according to claim 2, wherein the identity message further includes an identity identifier of the requesting device and/or a second random number generated by the requesting device; the third authentication response message further includes Including the identity of the requesting device and/or the second random number;

Then, before the requesting device determines the identity authentication result of the authentication access controller, the method further includes:

The requesting device verifies the consistency between the identity of the requesting device in the third authentication response message and the identity of the requesting device itself, and/or, verifies the second authentication response message in the third authentication response message. The consistency of the random number and the second random number generated by the requesting device is verified, and it is determined that the consistency verification passes.
The method according to claim 1, wherein the identity message further includes the digital signature of the requesting device, and before the authentication access controller determines the identity authentication result of the requesting device, the Methods also include:

The authentication access controller determines whether the digital signature of the requesting device passes the verification.
The method according to claim 8, wherein the determining, by the authentication access controller, whether the digital signature of the requesting device passes the verification specifically comprises:

The second authentication server verifies the digital signature of the requesting device by using the digital certificate of the requesting device, and if the authentication access controller receives the first authentication response message, the authentication access The controller determines that the digital signature of the requesting device has been verified; or,

The authentication access controller verifies the digital signature of the requesting device by using the digital certificate of the requesting device in the identity message, and determines whether the digital signature of the requesting device is verified according to the verification result; or,

When the digital certificate of the requesting device is further included in the second authentication result information, the authentication access controller uses the digital certificate of the requesting device in the second authentication result information to verify the digital certificate of the requesting device. The digital signature is verified, and whether the digital signature of the requesting device is verified is determined according to the verification result; or,

When the second authentication result information further includes the digital certificate of the requesting device, the authentication access controller verifies the digital certificate of the requesting device in the second authentication result information and the identity message in the digital certificate The digital certificate of the requesting device is consistent; if it is consistent, the authentication access controller verifies the digital signature of the requesting device by using the digital certificate of the requesting device, and determines the requesting device according to the verification result. Whether the digital signature is verified.
The method according to claim 1, wherein the first authentication result information further includes an identity identifier of the authentication access controller, and the requesting device determines the identity authentication of the authentication access controller. Before the result, the method further includes:

The requesting device verifies the consistency of the identity of the authentication access controller in the first authentication result information and the identity of the authentication access controller carried in the third authentication response message , and confirm that the consistency verification is passed; or,

The requesting device verifies the consistency of the identity of the authentication access controller in the first authentication result information and the identity of the authentication access controller carried in the first message, and Make sure that the consistency verification is passed.
The method according to any one of claims 1 to 10, wherein the first authentication server trusted by the authentication access controller and the second authentication server trusted by the requesting device are the same authentication server, and the authentication server Methods also include:

The first authentication server verifies the identity authentication code of the authentication access controller to obtain a first verification result, and performs legality verification on the digital certificate of the requesting device to obtain a second verification result. The first authentication result information is generated from the information including the second authentication result, the second authentication result information is generated according to the information including the second authentication result, and the first authentication result information is calculated and generated based on the information including the second authentication result information. A message authentication code, which calculates the signature data including the first authentication result information to generate the first digital signature, and generates the first digital signature according to the first authentication result information, the first digital signature, the second authentication result The result information and the information including the first message authentication code generate the first authentication response message.
The method according to any one of claims 1 to 10, wherein the first authentication server trusted by the authentication access controller and the second authentication server trusted by the requesting device are two different authentication servers, The method also includes:

The first authentication server verifies the identity authentication code of the authentication access controller to obtain a first authentication result, generates the first authentication result information according to the information including the first authentication result, and verifies the information including the first authentication result. The signature data including the authentication result information and the digital certificate of the requesting device is calculated to generate a second digital signature or the pre-shared key with the second authentication server is used, and the cryptographic algorithm agreed with the second authentication server is adopted. Calculate and generate a second message authentication code for information including the first authentication result information and the digital certificate of the requesting device;

The first authentication server sends a second authentication request message to the second authentication server, where the second authentication request message includes the first authentication result information, the digital certificate of the requesting device and the second digital number The signature or the second authentication request message includes the first authentication result information, the digital certificate of the requesting device and the second message authentication code; the second authentication server utilizes the first authentication server's authentication code. The public key verifies the second digital signature or the second authentication server uses the pre-shared key with the first authentication server to verify the second message authentication using the cryptographic algorithm agreed with the first authentication server If the verification is passed, the second verification server will perform legality verification on the digital certificate of the requesting device to obtain a second verification result, and generate the second verification result information according to the information including the second verification result. , calculate and generate the first digital signature for the signature data including the first identification result information, calculate and generate the third digital signature for the signature data including the second identification result information or use the A pre-shared key of an authentication server, and a cryptographic algorithm agreed with the first authentication server is used to calculate the information including the second authentication result information to generate a third message authentication code;

The first authentication server receives a second authentication response message sent by the second authentication server, where the second authentication response message includes the first authentication result information, the first digital signature, and the second authentication The result information and the third digital signature or the second authentication response message include the first authentication result information, the first digital signature, the second authentication result information and the third message authentication code;

The first authentication server verifies the third digital signature by using the public key of the second authentication server or the first authentication server uses the pre-shared key with the second authentication server and adopts the same key as the second authentication server. The password algorithm agreed by the authentication server verifies the third message authentication code. If the verification is passed, the first authentication server calculates and generates the first message authentication code according to the information including the second authentication result information. Information including the first authentication result information, the first digital signature, the second authentication result information, and the first message authentication code generates the first authentication response message.
The method according to any one of claims 1 to 10, wherein the message sent by the requesting device to the authentication access controller further comprises the requesting device's response to the authentication access controller received by the requesting device. The hash value calculated by the latest pre-order message sent;

Then, when the authentication access controller receives the message sent by the requesting device, it first verifies the hash value in the received message, and determines that the verification is passed;

The message sent by the authentication access controller to the requesting device further includes a hash value calculated by the authentication access controller on the received latest pre-order message sent by the requesting device;

Then, when the requesting device receives the message sent by the authentication access controller, it first verifies the hash value in the received message, and determines that the verification is passed;

The message sent by the authentication access controller to the first authentication server further includes a hash value calculated by the authentication access controller on the received latest pre-order message sent by the first authentication server;

Then, when the first authentication server receives the message sent by the authentication access controller, it first verifies the hash value in the received message, and determines that the verification is passed;

The message sent by the first authentication server to the authentication access controller further includes a hash value calculated by the first authentication server on the received latest pre-order message sent by the authentication access controller;

Then, when the authentication access controller receives the message sent by the first authentication server, it first verifies the hash value in the received message, and determines that the verification is passed;

The message sent by the first authentication server to the second authentication server further includes a hash value calculated by the first authentication server on the received latest pre-order message sent by the second authentication server;

Then, when the second authentication server receives the message sent by the first authentication server, it first verifies the hash value in the received message, and determines that the verification is passed;

The message sent by the second authentication server to the first authentication server further includes a hash value calculated by the second authentication server on the received latest pre-order message sent by the first authentication server;

Then, when the first authentication server receives the message sent by the second authentication server, it first verifies the hash value in the received message, and determines that the verification is passed.
A requesting device, characterized in that the requesting device comprises:

a sending module, configured to send an identity message to the authentication access controller, where the identity message includes the digital certificate of the requesting device;

a receiving module, configured to receive a third authentication response message sent by the authentication access controller, where the third authentication response message includes first authentication result information and a first digital signature; the first authentication result information includes For the first verification result of the authentication access controller, the first digital signature is a digital signature calculated and generated by a second authentication server trusted by the requesting device to the signature data including the first authentication result information ;

a verification module, configured to verify the first digital signature by using the public key of the second authentication server;

A determining module, configured to determine the identity authentication result of the authentication access controller according to the first authentication result in the first authentication result information if the authentication is passed.
The requesting device according to claim 14, wherein the receiving module is further configured to: before the sending module sends the identity message to the authentication access controller, receive the first message sent by the authentication access controller. message, the first message includes a first random number generated by the authentication access controller;

Then, the identity message further includes the first random number.
The requesting device according to claim 15, wherein the first message further includes security capability parameter information supported by the authentication access controller;

The determining module is further configured to: determine a specific security policy used by the requesting device according to the security capability parameter information;

Then the identity message also includes the specific security policy.
The requesting device according to claim 15, wherein the first message further includes an identity identifier of at least one authentication server trusted by the authentication access controller;

The determining module is further configured to: determine the identity of at least one authentication server trusted by the requesting device according to the identity of at least one authentication server trusted by the authentication access controller;

The identity message further includes the identity identifier of at least one authentication server trusted by the requesting device.
The requesting device according to claim 14, wherein the identity message sent by the sending module further includes an identity identifier of at least one authentication server trusted by the requesting device.
The requesting device according to claim 15, wherein the identity message further includes the identity of the requesting device and/or the second random number generated by the requesting device; then the third authentication response message Also includes the identity of the requesting device and/or the second random number;

The verification module is further configured to: before the determination module determines the identity authentication result of the authentication access controller, verify the identity of the requesting device in the third authentication response message and the requesting device itself. The consistency of the identity identifier is verified, and/or the consistency of the second random number in the third authentication response message and the second random number generated by the requesting device is verified.
The requesting device according to claim 14, wherein the first authentication result information further includes an identity identifier of the authentication access controller;

The verification module is further configured to: before the determination module determines the identity authentication result of the authentication access controller, verify the identity of the authentication access controller and the authentication access controller in the first authentication result information. Verify the consistency of the identity identifier of the authentication access controller carried in the third authentication response message; or,

The verification module is further configured to: before the determination module determines the identity authentication result of the authentication access controller, verify the identity of the authentication access controller and the authentication access controller in the first authentication result information. The consistency of the identity identification of the authentication access controller carried in the first message is verified.
The requesting device according to any one of claims 14 to 20, wherein the message sent by the requesting device to the authentication access controller further comprises the requesting device's response to the authentication access control received by the requesting device. The hash value calculated by the latest preorder message sent by the server.
An authentication access controller, characterized in that the authentication access controller comprises:

a receiving module, configured to receive an identity message sent by a requesting device, where the identity message includes a digital certificate of the requesting device;

The generating module is configured to use the pre-shared key with the first authentication server trusted by the authentication access controller, and use the cryptographic algorithm agreed with the first authentication server to perform a cryptographic algorithm including the digital certificate of the requesting device. information calculation to generate the identity authentication code of the authentication access controller;

a sending module, configured to send a first authentication request message to the first authentication server, where the first authentication request message includes the digital certificate of the requesting device and the identity authentication code of the authentication access controller;

The receiving module is further configured to receive a first authentication response message sent by the first authentication server, where the first authentication response message includes first authentication result information and the first authentication result information of the second authentication server trusted by the requesting device. a digital signature, the second authentication result information and the first message authentication code of the first authentication server; the first authentication result information includes the first authentication result of the identity authentication code of the authentication access controller, The first digital signature is a digital signature calculated and generated by the second authentication server on the signature data including the first authentication result information, where the second authentication result information includes a digital certificate for the requesting device The second verification result of the first authentication server, the first message authentication code of the first authentication server is that the first authentication server uses the pre-shared key with the authentication access controller and adopts the agreement with the authentication access controller. The cryptographic algorithm is generated by calculating the information including the second authentication result information;

The verification module is used for using the pre-shared key with the first authentication server to verify the first message authentication code of the first authentication server by adopting the cryptographic algorithm agreed with the first authentication server, if the verification is passed, then The determination module determines the identity authentication result of the requesting device according to the second verification result in the second authentication result information; when the determining module determines that the identity authentication result of the requesting device is legal, the sending module sends the request device to the requesting device. The requesting device sends a third authentication response message; or,

It is used to verify the first message authentication code of the first authentication server by using the pre-shared key with the first authentication server and adopt the cryptographic algorithm agreed with the first authentication server. The module sends a third authentication response message to the requesting device, and the determining module determines the identity authentication result of the requesting device according to the second verification result in the second authentication result information; or,

It is used to verify the first message authentication code of the first authentication server by using the pre-shared key with the first authentication server and adopt the cryptographic algorithm agreed with the first authentication server; If the verification of the first message authentication code is passed, the determination module determines the identity authentication result of the requesting device according to the second verification result in the second authentication result information; the sending module sends a third authentication response message to the requesting device ;

Wherein, the third authentication response message includes the first authentication result information and the first digital signature.
The authentication access controller according to claim 22, wherein the sending module is further configured to: before the receiving module receives the identity message sent by the requesting device, send a first message to the requesting device, the The first message includes a first random number generated by the authentication access controller;

then the identity message also includes the first random number;

The verification module is further configured to: after the receiving module receives the identity message, verify the consistency of the first random number in the identity message and the first random number generated by the authentication access control .
The authentication access controller according to claim 23, wherein the first message further includes an identity identifier of at least one authentication server trusted by the authentication access controller;

The identity message also includes an identity identifier of at least one authentication server trusted by the requesting device;

The determining module is further configured to: according to the identity of at least one authentication server trusted by the requesting device in the identity message and the identity of at least one authentication server trusted by the authentication access controller in the first message identification to determine the first authentication server.
The authentication access controller according to claim 22, wherein the identity message further includes an identity identifier of at least one authentication server trusted by the requesting device;

The determining module is further configured to: determine the first authentication server according to the identity of at least one authentication server trusted by the requesting device and the identity of the authentication server trusted by the authentication access controller.
The authentication access controller according to claim 23, wherein the first authentication request message further includes the identity of the authentication access controller and/or the first authentication generated by the authentication access controller. a random number;

Correspondingly, the first authentication response message further includes the identity identifier of the authentication access controller and/or the first random number;

Then the verification module is further configured to: before the determination module determines the identity verification result of the requesting device, verify the identity of the authentication access controller and the authentication access controller in the first authentication response message. verifying the consistency of the identity identifier of the access controller itself, and/or, verifying the consistency of the first random number in the first authentication response message and the first random number generated by the authentication access controller authenticating.
The authentication access controller according to claim 22, wherein the identity message further includes a digital signature of the requesting device, and the determining module is specifically configured to:

Before determining the identity authentication result of the requesting device, the determining module further determines whether the digital signature of the requesting device is verified.
The authentication access controller according to claim 27, wherein the determining module for determining whether the digital signature of the requesting device passes the verification specifically includes:

The second authentication server verifies the digital signature of the requesting device by using the digital certificate of the requesting device, and if the receiving module receives the first authentication response message, the determining module determines the request The digital signature of the device has been verified; or,

The determining module verifies the digital signature of the requesting device by using the digital certificate of the requesting device in the identity message, and determines whether the digital signature of the requesting device is verified according to the verification result; or,

When the second authentication result information further includes the digital certificate of the requesting device, the determining module uses the digital certificate of the requesting device in the second authentication result information to perform a digital signature on the requesting device Verify, according to the verification result, determine whether the digital signature of the requesting device is verified; or,

When the second authentication result information further includes the digital certificate of the requesting device, the determining module verifies the digital certificate of the requesting device in the second authentication result information and the digital certificate in the identity message The digital certificates of the requesting device are consistent; if they are consistent, the digital signature of the requesting device is verified by using the digital certificate of the requesting device, and whether the digital signature of the requesting device is verified is determined according to the verification result.
The authenticated access controller according to any one of claims 22 to 28, wherein the message sent by the authenticated access controller to the requesting device further includes the received The hash value calculated by the latest pre-order message sent by the requesting device; the message sent by the authentication access controller to the first authentication server also includes the first authentication received by the authentication access controller. The hash value calculated by the latest preorder message sent by the server.
A first authentication server, characterized in that the first authentication server comprises:

The receiving module is configured to receive the first authentication request message sent by the authentication access controller, where the first authentication request message includes the digital certificate of the requesting device and the identity authentication code of the authentication access controller; the authentication access controller; The identity authentication code of the access controller is the authentication access controller uses the pre-shared key with the first authentication server, and adopts the cryptographic algorithm agreed with the first authentication server to verify the digital certificate including the requesting device. generated by the calculation of the information included;

A sending module, configured to send a first authentication response message to the authentication access controller, where the first authentication response message includes first authentication result information and a first digital signature of a second authentication server trusted by the requesting device , the second authentication result information and the first message authentication code of the first authentication server; the first authentication result information includes the first authentication result of the identity authentication code of the authentication access controller, the first authentication result information A digital signature is a digital signature calculated and generated by the second authentication server on the signature data including the first authentication result information, and the second authentication result information includes the second authentication result of the digital certificate of the requesting device. As a result of verification, the first message authentication code of the first authentication server is that the first authentication server uses the pre-shared key with the authentication access controller and adopts the cryptographic algorithm agreed with the authentication access controller. Calculated and generated from information including the second authentication result information.
The first authentication server according to claim 30, wherein the first authentication server further comprises:

a first verification module, configured to verify the identity authentication code of the authentication access controller to obtain a first verification result, and perform legality verification on the digital certificate of the requesting device to obtain a second verification result;

The first generation module is configured to generate the first identification result information according to the information including the first verification result, generate the second identification result information according to the information including the second verification result, The information including the second authentication result information is calculated to generate the first message authentication code of the first authentication server, and the signature data including the first authentication result information is calculated to generate the first digital signature;

A second generating module, configured to generate the first authentication response according to information including the first authentication result information, the first digital signature, the second authentication result information and the first message authentication code information.
The first authentication server according to claim 30, wherein the first authentication server further comprises:

a second verification module, configured to verify the identity authentication code of the authentication access controller to obtain a first verification result;

a third generation module, configured to generate the first authentication result information according to the information including the first verification result, and to generate the signature data including the first authentication result information and the digital certificate of the requesting device Calculate and generate a second digital signature or use the pre-shared key with the second authentication server, and use the cryptographic algorithm agreed with the second authentication server to pair the digital certificate including the first authentication result information and the requesting device generating a second message authentication code by calculating the information inside;

The sending module is further configured to send a second authentication request message to the second authentication server, where the second authentication request message includes the first authentication result information, the digital certificate of the requesting device and the first authentication request message. The second digital signature or the second authentication request message includes the first authentication result information, the digital certificate of the requesting device and the second message authentication code;

The receiving module is further configured to receive a second authentication response message sent by the second authentication server, where the second authentication response message includes the first authentication result information, the first digital signature, and the first authentication result. The second authentication result information and the third digital signature or the second authentication response message includes the first authentication result information, the first digital signature, the second authentication result information and the third message authentication code; the The second authentication result information is that the second authentication server verifies the digital certificate of the requesting device to obtain a second verification result, and is generated according to the information including the second verification result; the first digital signature is The second authentication server calculates and generates the signature data including the first authentication result information; the third digital signature is the signature of the second authentication server including the second authentication result information The third message authentication code is generated by data calculation, or the third message authentication code is the second authentication server using the pre-shared key with the first authentication server, using the cryptographic algorithm agreed with the first authentication server to include the The information including the second authentication result information is calculated and generated;

The third verification module is used to verify the third digital signature by using the public key of the second authentication server or use the pre-shared key with the second authentication server, and use the password agreed with the second authentication server an algorithm verifies the third message authentication code;

The fourth generation module is used to calculate and generate the first message authentication code for the information including the second authentication result information, if the verification is passed, according to the information including the first authentication result information, the first number Information including the signature, the second authentication result information, and the first message authentication code generates the first authentication response message.
The first authentication server according to any one of claims 30 to 32, characterized in that the message sent by the first authentication server to the authentication access controller further includes the message received by the first authentication server on the received The hash value calculated by the latest pre-order message sent by the authentication access controller; the message sent by the first authentication server to the second authentication server also includes the second authentication server received by the first authentication server. The hash value calculated by the latest preorder message sent by the authentication server.
A second authentication server, characterized in that the second authentication server comprises:

A receiving module, configured to receive a second authentication request message sent by the first authentication server, where the second authentication request message includes the first authentication result information, the digital certificate of the requesting device and the second digital signature or the second authentication request The message includes the first authentication result information, the digital certificate of the requesting device and the second message authentication code; the first authentication result information is obtained by the first authentication server verifying the identity authentication code of the access controller. a verification result, which is generated according to the information including the first verification result; the second digital signature is obtained by the first verification server for the digital certificate including the first verification result information and the requesting device or the second message authentication code is generated by the first authentication server using the pre-shared key with the second authentication server, using the cryptographic algorithm agreed with the second authentication server Calculated and generated from information including the first authentication result information and the digital certificate of the requesting device;

A verification module for verifying the second digital signature by using the public key of the first authentication server or using the pre-shared key with the first authentication server, and using the cryptographic algorithm agreed with the first authentication server to verify For the second message authentication code, if the verification is passed, verify the validity of the digital certificate of the requesting device to obtain a second verification result;

The generating module is configured to generate second authentication result information according to the information including the second verification result, calculate and generate a first digital signature for the signature data including the first authentication result information, and generate a first digital signature for the signature data including the first authentication result information. 2. Calculate the signature data including the authentication result information to generate a third digital signature or use the pre-shared key with the first authentication server, and use the cryptographic algorithm agreed with the first authentication server to generate a third digital signature including the second authentication result. Information calculation including information generates a third message authentication code;

A sending module, configured to send a second authentication response message to the first authentication server, where the second authentication response message includes the first authentication result information, the first digital signature, and the second authentication result information and the third digital signature or the second authentication response message includes the first authentication result information, the first digital signature, the second authentication result information and the third message authentication code.
The second authentication server according to claim 34, characterized in that, the message sent by the second authentication server to the first authentication server further includes the message received by the second authentication server to the first authentication server. The hash value computed by the latest preorder message sent.
A requesting device, characterized in that the requesting device comprises:

memory for storing program instructions;

The processor is configured to call the program instructions stored in the memory, and execute the method on the requesting device side in any one of claims 1 to 13 according to the obtained program.
An authentication access controller, characterized in that the authentication access controller comprises:

memory for storing program instructions;

The processor is configured to call the program instructions stored in the memory, and execute the method for identifying the access controller side according to any one of claims 1 to 13 according to the obtained program.
A first authentication server, characterized in that the first authentication server comprises:

memory for storing program instructions;

The processor is configured to call the program instructions stored in the memory, and execute the method on the first authentication server side according to the obtained program according to any one of claims 1 to 13 .
A second authentication server, characterized in that the second authentication server comprises:

memory for storing program instructions;

The processor is configured to invoke the program instructions stored in the memory, and execute the method on the second authentication server side according to the obtained program according to any one of claims 1 to 13 .
A computer storage medium, characterized in that the computer storage medium stores computer-executable instructions, and the computer-executable instructions are used to cause the computer to execute the method according to any one of claims 1-13.