Interactive authentication method, system, computer device, and non-volatile readable storage medium
View Patent ↗Provided is an interactive authentication method, applicable to a transmitter. The transmitter is communicatively connected to a receiver. The authentication method includes: generating a first challenge and transmitting the first challenge to the receiver; receiving a response from the receiver, wherein the response comprises first identity authentication information and a second challenge, the first identity authentication information and the second challenge being encrypted using a first identity authentication key; generating, based on the first challenge, a second identity authentication key and second identity authentication information; and decrypting the first identity authentication information using the second identity authentication key, and performing identity authentication by matching the decrypted first identity authentication information with the second identity authentication information.
1 . An interactive authentication method, applicable to a transmitter, the transmitter being communicatively connected to a receiver,
the authentication method comprising:
generating a first challenge and transmitting the first challenge to the receiver;
receiving a response from the receiver, wherein the response comprises first identity authentication information and a second challenge, the first identity authentication information and the second challenge being encrypted using a first identity authentication key;
generating, based on the first challenge, a second identity authentication key and second identity authentication information; and
decrypting the first identity authentication information using the second identity authentication key, and performing identity authentication by matching the decrypted first identity authentication information with the second identity authentication information;
wherein the first identity authentication key and the first identity authentication information are generated by the receiver based on the first challenge using a first encryption circuit which employs a biased time-average-frequency direct period synthesis and a physical unclonable function, and the second identity authentication key and the second identity authentication information are generated by the transmitter based on the first challenge using a second identity encryption circuit which employs a biased time-average-frequency direct period synthesis and a physical unclonable function, properties of the first encryption circuit and the second encryption circuit being maintained consistent.
2 . The interactive authentication method according to claim 1 , wherein decrypting the first identity authentication information using the second identity authentication key and performing the identity authentication by matching the decrypted first identity authentication information with the second identity authentication information comprises:
in response to the decrypted first identity authentication information being the same as the second identity authentication information, determining that the identity authentication of the receiver is successful and decrypting the second challenge; or
in response to the decrypted first identity authentication information being different from the second identity authentication information, determining that the identity authentication of the receiver fails and stopping communication between the transmitter and the receiver.
3 . The interactive authentication method according to claim 2 ,
wherein determining that the identity authentication of the receiver is successful and decrypting the second challenge in response to the decrypted first identity authentication information being the same as the second identity authentication information comprises:
generating a first information key based on the decrypted second challenge;
acquiring encrypted information by encrypting information for transmission using the first information key; and
transmitting the encrypted information to the receiver.
4 . The interactive authentication method according to claim 3 , wherein acquiring the encrypted information by encrypting the information for transmission using the first information key comprises:
encrypting the information for transmission using the first information key according to a logical operation by means of stream encryption.
5 . The interactive authentication method according to claim 3 , further comprising:
receiving first digest information from the receiver, wherein the first digest information is acquired by processing a second information key generated by the second challenge using a pre-defined algorithm by the receiver; and
acquiring second digest information by processing the first information key using a pre-defined algorithm and performing decoding authentication by matching the first digest information with the second digest information.
6 . The interactive authentication method according to claim 5 , wherein performing the decoding authentication by matching the first digest information with the second digest information comprises:
in response to the first digest information being the same as and the second digest information, determining that the decoding authentication is successful and stopping communication by transmitting an acknowledgment signal to the receiver; or
in response to the first digest information being different from the second digest information, determining that decoding authentication fails.
7 . A computer device, comprising a processor and a memory, wherein the memory stores one or more computer programs; wherein
the one or more computer programs, when loaded and run by the processor, cause the processor to perform the method as defined in claim 1 .
8 . The computer device according to claim 7 , wherein the one or more computer programs, when loaded and run by the processor, cause the processor to perform:
in response to the decrypted first identity authentication information being the same as the second identity authentication information, determining that the identity authentication of the receiver is successful and decrypting the second challenge; or
in response to the decrypted first identity authentication information being different from the second identity authentication information, determining that the identity authentication of the receiver fails and stopping communication between the transmitter and the receiver.
9 . The computer device according to claim 8 , wherein the one or more computer programs, when loaded and run by the processor, cause the processor to perform:
generating a first information key based on the decrypted second challenge;
acquiring encrypted information by encrypting information for transmission using the first information key; and
transmitting the encrypted information to the receiver.
10 . A non-volatile computer-readable storage medium, storing one or more computer programs; wherein
the one or more computer programs, when loaded and run by one or more processors, cause then one or more processors to perform the method as defined in claim 1 .
11 . An interactive authentication method, applicable to a receiver, the receiver being communicatively connected to a transmitter,
the authentication method comprising:
receiving a first challenge from the transmitter;
generating, based on the first challenge, a first identity authentication key, first identity authentication information, and a second challenge;
encrypting, using the first identity authentication key, the first identity authentication information and the second challenge; and
transmitting the encrypted first identity authentication information and the encrypted second challenge as a response to the transmitter for identity authentication;
wherein the first identity authentication key and the first identity authentication information are generated by the receiver based on the first challenge using a first encryption circuit which employs a biased time-average-frequency direct period synthesis and a physical unclonable function.
12 . The interactive authentication method according to claim 11 , further comprising:
receiving encrypted information from the transmitter, wherein the encrypted information is acquired by the transmitter by encrypting information for transmission based on a first information key, the first information key being generated by the transmitter based on the second challenge;
generating a second information key based on the second challenge; and
acquiring the information for transmission by decrypting the encrypted information using the second information key.
13 . The interactive authentication method according to claim 12 , wherein acquiring the information for transmission by decrypting the encrypted information using the second information key comprises:
encrypting the information for transmission using the second information key according to a logical operation by means of stream encryption.
14 . The interactive authentication method according to claim 11 , further comprising:
acquiring first digest information by processing the second information key using a pre-defined algorithm, and transmitting the first digest information to the transmitter for decoding authentication.
15 . The interactive authentication method according to claim 11 , further comprising:
stopping communication by receiving an acknowledgment signal from the transmitter.
16 . An interactive authentication system, comprising: a transmitter and a receiver; wherein the transmitter is configured to generate a first challenge and transmit the first challenge to the receiver;
the receiver is configured to receive the first challenge transmitted by the transmitter; generate, based on the first challenge, a first identity authentication key, first identity authentication information, and a second challenge; encrypt, using the first identity authentication key, the first identity authentication information and the second challenge; and transmit the encrypted first identity authentication information and the encrypted second challenge as a response to the transmitter; and
the transmitter is further configured to generate, based on the first challenge, a second identity authentication key and second identity authentication information; decrypt the first identity authentication information using the second identity authentication key; and perform identity authentication by matching the decrypted first identity authentication information with the second identity authentication information;
wherein the first identity authentication key and the first identity authentication information are generated by the receiver based on the first challenge using a first encryption circuit which employs a biased time-average-frequency direct period synthesis and a physical unclonable function, and the second identity authentication key and the second identity authentication information are generated by the transmitter based on the first challenge using a second identity encryption circuit which employs a biased time-average-frequency direct period synthesis and a physical unclonable function, properties of the first encryption circuit and the second encryption circuit being maintained consistent.