IDENTITY AUTHENTICATION METHOD, AUTHENTICATION ACCESS CONTROLLER, REQUESTING DEVICE, STORAGE MEDIUM, PROGRAM, AND PROGRAM PRODUCT

    公开(公告)号:US20240056296A1

    公开(公告)日:2024-02-15

    申请号:US18259305

    申请日:2021-12-21

    CPC classification number: H04L9/088 H04L9/30

    Abstract: Disclosed in embodiments of the present application are an identity authentication method. Bidirectional or unidirectional identity authentication between an authentication access controller and a requesting device is implemented by using a pre-shared key, thereby laying a foundation for ensuring that a user accessing a network is legitimate and/or a network accessed by a user is legitimate, so as to implement secret communication between the requesting device and the authentication access controller. In addition, in an identity authentication process, a verified party performs calculation on information comprising the pre-shared key of two parties and random numbers respectively generated by the two parties to obtain an identity authentication key, and performs calculation on specified content by using the identity authentication key to obtain an identity authentication code of the verified party. According to the method for calculating an identity authentication code provided by the present application, key exchange calculation is combined, and the capability of resistance to dictionary brute-force attack or to quantum computing attack in the authentication process is enhanced by means of an ingenious detail design. Also disclosed in the embodiments of the present application are an authentication access controller, a requesting device, a storage medium, a program, and a program product.

    METHOD AND DEVICE FOR IDENTITY AUTHENTICATION

    公开(公告)号:US20240323188A1

    公开(公告)日:2024-09-26

    申请号:US18269617

    申请日:2021-12-21

    CPC classification number: H04L63/10 H04L9/0618 H04L9/3247

    Abstract: A method and device for identity authentication. An authentication access controller (AAC) acquires an identity ciphertext message transmitted by a requesting device (REQ), the identity ciphertext message comprising an identity information ciphertext of the REQ, the AAC decrypts the identity information ciphertext of the REQ to generate a digital certificate (CertREQ) of the REQ, transmits a first authentication request message comprising the CertREQ to a first authentication server, and receives a first authentication response message transmitted by the first authentication server, the first authentication response message comprising authentication result information and a digital signature of the first authentication server, the AAC utilizes a public key of the first authentication server to verify the digital signature of the first authentication server, and if successfully verified, then the AAC determines an identity authentication result for the REQ on the basis of the verification result of the CertREQ in the authentication result information.

    IDENTITY AUTHENTICATION METHOD, AUTHENTICATION ACCESS CONTROLLER, REQUEST DEVICE, STORAGE MEDIUM, PROGRAM, AND PROGRAM PRODUCT

    公开(公告)号:US20240056433A1

    公开(公告)日:2024-02-15

    申请号:US18259150

    申请日:2021-12-21

    CPC classification number: H04L63/08

    Abstract: Disclosed is an identity authentication method. When a request device and an authentication access controller perform identity verification on the basis of an authentication mechanism of a pre-shared key, identity information of a verified party is transmitted in the form of a ciphertext, thereby preventing the identity information of the verified party from being directly exposed during transmission, and ensuring that an attacker cannot obtain private and sensitive information. Two-way or one-way identity authentication between the authentication access controller and the request device is realized, while the confidentiality of entity identity related information is ensured, thereby laying the foundation for ensuring that a user accessing a network is legitimate and/or the network accessed by the user is legitimate. Moreover, the dictionary brute-force attack resistance or quantum computation attack resistance during authentication is enhanced in conjunction with key exchange computation and by means of ingenious detail designs. Also disclosed are an authentication access controller, a request device, a storage medium, a program, and a program product.

    IDENTITY AUTHENTICATION METHOD AND APPARATUS, STORAGE MEDIUM, PROGRAM, AND PROGRAM PRODUCT

    公开(公告)号:US20240064006A1

    公开(公告)日:2024-02-22

    申请号:US18259297

    申请日:2021-12-21

    CPC classification number: H04L9/0825 H04L9/3247 H04L9/3228

    Abstract: Disclosed is an identity authentication method. During the process of a requesting device authenticating the identity of an authentication access controller, confidentiality processing is performed on identity information that carries private and sensitive information, and identity authentication result information, thus private and sensitive information can be prevented from being exposed, such that an attacker cannot acquire private and sensitive information in a first authentication response message or an authentication result message even if they have intercepted same, thereby preventing an attack of an attacker on a legitimate authentication access controller, and ensuring the security of the authentication access controller, the requesting device and even a network. Further disclosed are an identity authentication apparatus, a storage medium, a program, and a program product.

    IDENTITY AUTHENTICATION METHOD AND APPARATUS, STORAGE MEDIUM, PROGRAM, AND PROGRAM PRODUCT

    公开(公告)号:US20240097887A1

    公开(公告)日:2024-03-21

    申请号:US18259299

    申请日:2021-12-21

    CPC classification number: H04L9/0825 H04L9/0861 H04L9/3228

    Abstract: An identity authentication method is disclosed in embodiments of the present application. When a requester and an authentication access controller perform identity authentication using an authentication mechanism of a pre-shared key, the identity information of entities is transmitted in the form of ciphertext, thereby preventing the identity information of the entities from being exposed during the transmission, so that attackers cannot obtain private or sensitive information. The mutual or unilateral identity authentication between the authentication access controller and the requester is achieved while ensuring the confidentiality of the entity identity and related information, thereby laying a foundation for ensuring that the user accessing the network is legitimate and/or the network accessed by the user is legitimate. Meanwhile, in connection with key exchange calculations and by an ingenious and detailed design, the ability of the authentication process to resist dictionary brute force attacks or quantum computing attacks is enhanced. Further disclosed in embodiments of the present application are an identity authentication apparatus, a storage medium, a program, and a program product.

Patent Agency Ranking