公开(公告)号：US08510556B2

公开(公告)日：2013-08-13

申请号：US12497930

申请日：2009-07-06

申请人： Zhenfu Cao ,  Xiaolei Dong ,  Rongxing Lu ,  Jiwei Wei

发明人： Zhenfu Cao ,  Xiaolei Dong ,  Rongxing Lu ,  Jiwei Wei

IPC分类号： H04L9/32 ,  G06F21/44

CPC分类号： G06F21/445 ,  H04L9/0844 ,  H04L9/3242 ,  H04L9/3273

摘要： The embodiments of the present disclosure disclose an authentication method, a system, a server, and a user node are disclosed herein. The method includes: generating, by a server, a server session key according to the identity information, at least one login information parameter, and the validity period included in the login information, generating at least one session key parameter of a user node according to the generator point of the algebraic curve, and sending at least one session key parameter of the user node to the user node; generating, by the user node, a user node session key according to at least one session key parameter of the user node; performing, by the server and the user node, mutual authentication according to the session keys. The authentication solution under the present disclosure is simple and practicable, and is also applicable to authenticating the user node in a grid computing platform.

公开(公告)号：US20090271624A1

公开(公告)日：2009-10-29

申请号：US12497930

申请日：2009-07-06

申请人： Zhenfu Cao ,  Xiaolei Dong ,  Rongxing Lu ,  Jiwei Wei

发明人： Zhenfu Cao ,  Xiaolei Dong ,  Rongxing Lu ,  Jiwei Wei

IPC分类号： H04L9/32

CPC分类号： G06F21/445 ,  H04L9/0844 ,  H04L9/3242 ,  H04L9/3273

摘要： The embodiments of the present disclosure disclose an authentication method, a system, a server, and a user node are disclosed herein. The method includes: generating, by a server, a server session key according to the identity information, at least one login information parameter, and the validity period included in the login information, generating at least one session key parameter of a user node according to the generator point of the algebraic curve, and sending at least one session key parameter of the user node to the user node; generating, by the user node, a user node session key according to at least one session key parameter of the user node; performing, by the server and the user node, mutual authentication according to the session keys. The authentication solution under the present disclosure is simple and practicable, and is also applicable to authenticating the user node in a grid computing platform.

摘要翻译： 本公开的实施例公开了本文公开的认证方法，系统，服务器和用户节点。 该方法包括：根据所述身份信息，至少一个登录信息参数和所述登录信息中包含的有效期，由服务器生成服务器会话密钥，根据所述用户节点生成用户节点的至少一个会话密钥参数 代数曲线的发生点，并向用户节点发送用户节点的至少一个会话密钥参数; 根据用户节点的至少一个会话密钥参数，由用户节点生成用户节点会话密钥; 由服务器和用户节点执行根据会话密钥的相互认证。 本公开的认证方案简单实用，也适用于认证网格计算平台中的用户节点。

公开(公告)号：US20090307492A1

公开(公告)日：2009-12-10

申请号：US12537659

申请日：2009-08-07

申请人： Zhenfu CAO ,  Xiaolei DONG ,  Rongxing LU ,  Zhenchuan CHAI ,  Jiwei WEI

发明人： Zhenfu CAO ,  Xiaolei DONG ,  Rongxing LU ,  Zhenchuan CHAI ,  Jiwei WEI

IPC分类号： H04L9/32

CPC分类号： H04L63/0869 ,  H04L9/0844 ,  H04L9/3073

摘要： A bidirectional authentication method, a system, and a network device, that relates to network information security are provided. The method may include: a network device configured to generate an inspection parameter according to a public key of the peer network device and a private key of the network device, the public key and the private key of the network device being generated according to an identifier of the network device. The network device may perform reciprocal authentication according to the inspection parameter generated by the network device and an inspection parameter sent by the peer network device. A system and a network device for bidirectional authentication are also provided herein. As such, extra calculation caused by certificate authentication may be reduced, and thus provide a more secure and reliable system having a simplified key management.

摘要翻译： 提供了与网络信息安全相关的双向认证方法，系统和网络设备。 该方法可以包括：网络设备，被配置为根据对等网络设备的公钥和网络设备的私钥，根据标识符生成的网络设备的公开密钥和私钥来生成检查参数 的网络设备。 网络设备可以根据由网络设备产生的检查参数和对等网络设备发送的检查参数来进行互认认证。 本文还提供了用于双向认证的系统和网络设备。 因此，可以减少由证书认证引起的额外计算，从而提供具有简化的密钥管理的更安全和可靠的系统。