Identity authentication method and system, server, and terminal
An identity authentication method is described. The method includes, when receiving a group joining request that is sent by a first terminal and that is used for joining a trusted group, generating, by a server, a first certificate for the first terminal based on a first version number, and sending them to the first terminal. The method further includes, when determining that a second terminal is removed from the trusted group, updating the first version number to a second version number; and separately generating, by the server based on the second version number, a corresponding second certificate for a terminal not removed from the trusted group; and separately sending the corresponding second certificate and the second version number to the terminal not removed from the trusted group. In this way, during authentication, a terminal may compare a version number of the other party to perform identity authentication, thereby improving authentication efficiency.
1. An identity authentication method, carried out on a server and first terminal, the method comprising:
receiving, by the server, a group joining request for joining a trusted group, wherein the group joining request was sent by the first terminal, and wherein in accordance with the receiving the group joining request the server performs further operations as follows:
generating a first certificate for the first terminal based on a first version number that corresponds to the trusted group including at least the first terminal, a second terminal and a third terminal;
sending the first certificate and the first version number to the first terminal;
determining, after the generating a first certificate, that the second terminal is removed from the trusted group; and
performing, in accordance with the determining that the second terminal is removed from the trusted group, further operations including:
updating the first version number to a second version number according to a preset rule, wherein the second version number corresponds to the trusted group that includes the first terminal and the third terminal, and the second version number is greater than the first version number;
generating, based on the second version number for each terminal that is not removed from the trusted group, a corresponding second certificate; and
sending the corresponding second certificate and the second version number to each terminal that is not removed from the trusted group, including the first terminal of the trusted group;
wherein the first terminal stores a device list sent by the server,
wherein the device list includes recorded information for each terminal that is not removed from the trusted group,
wherein the recorded information includes, for each terminal that is not removed from the trusted group, a corresponding:
identifier, and
public key;
wherein the method further comprises the first terminal performing further operations as follows:
receiving an authentication request sent by the third terminal, wherein the authentication includes a third version number and an identifier of the third terminal;
first determining the third version number is less than the second version number;
further determining, in accordance with the first determining, a match exists between:
the identifier of the third terminal in the authentication request, and
the identifier of the third terminal in recorded information for the third terminal in the device list; and
determining, in accordance with the further determining, an identity of the third terminal is valid.
2. The method according to claim 1 , wherein the group joining request comprises an identifier and a public key of the first terminal; and the method further comprises:
storing the identifier and the public key of the first terminal to a device list; and
sending the device list to the first terminal,
wherein the device list comprises an identifier and a public key for each terminal that is not removed from the trusted group, thereby enabling the first terminal to obtain, from the device list in an authentication process, a public key of a to-be-authenticated terminal to perform authentication processing.
3. The method according to claim 2 , wherein the method further comprises:
sending, to all the terminals not removed from the trusted group, the device list storing the identifier and the public key of the first terminal.
4. A system including a server and a first terminal,
wherein the server comprises a first processor; and a first memory comprising computer-executable instructions that, when executed by the first processor, facilitate the server carrying out a method comprising:
receiving a group joining request for joining a trusted group, wherein the group joining request was sent by the first terminal, and wherein in accordance with the receiving the group joining request the server performs further operations as follows:
generating a first certificate for the first terminal based on a first version number that corresponds to the trusted group including at least the first terminal, a second terminal and a third terminal;
sending the first certificate and the first version number to the first terminal;
determining, after the generating a first certificate, that the second terminal is removed from the trusted group, and
performing, in accordance with the determining that the second terminal is removed from the trusted group, further operations including:
updating the first version number to a second version number according to a preset rule, wherein the second version number corresponds to the trusted group that includes the first terminal and the third terminal, and the second version is greater than the first version;
generating, based on the second version number for each terminal that is not removed from the trusted group, a corresponding second certificate; and
sending the corresponding second certificate and the second version number to each terminal that is not removed from the trusted group, including the first terminal of the trusted group;
wherein the first terminal stores a device list sent by the server,
wherein the device list includes recorded information for each terminal that is not removed from the trusted group,
wherein the recorded information includes, for each terminal that is not removed from the trusted group, a corresponding:
identifier, and
public key;
wherein the method further comprises the first terminal performing further operations as follows:
receiving an authentication request sent by the third terminal, wherein the authentication includes a third version number and an identifier of the third terminal;
first determining the third version number is less than the second version number;
further determining, in accordance with the first determining, a match exists between:
the identifier of the third terminal in the authentication request, and
the identifier of the third terminal in recorded information for the third terminal in the device list; and
determining, in accordance with the further determining, an identity of the third terminal is valid.
5. The system according to claim 4 , wherein the group joining request comprises an identifier and a public key of the first terminal; and the server further comprises a storage, and wherein the method further comprises:
storing, in the storage, the identifier and the public key of the first terminal to a device list; and
sending the device list to the first terminal,
wherein the device list comprises an identifier and a public key for each terminal that is not removed from the trusted group, thereby enabling the first terminal to obtain, from the device list in an authentication process, a public key of a to-be-authenticated terminal to perform authentication processing.
6. The system according to claim 5 , wherein the method further comprises:
sending, to all the terminals not removed from the trusted group, the device list storing the identifier and the public key of the first terminal.