CN114722364A - Authentication method, device and equipment - Google Patents

Abstract

The invention provides an authentication method, an authentication device and authentication equipment. The method comprises the following steps: acquiring a first handshake message; the first handshake message comprises an elliptic curve type supported by the second authentication end; determining a public key of the first authentication end according to a target elliptic curve type of the supported elliptic curve types; sending a second handshake message to a second authentication end, wherein the second handshake message comprises a target elliptic curve type and the public key; and performing identity verification of IBS based on identity with the second authentication end by adopting a signature algorithm corresponding to the type of the target elliptic curve. By adopting the method, the determined target elliptic curve type for key exchange is multiplexed into the elliptic curve type for IBS identity verification and signature algorithm determination, so that the elliptic curve type used by IBS signature and the elliptic curve type used in TLS handshake process are the same elliptic curve type, and the identity authentication mode between the first authentication end and the second authentication end is simple in operation process.

Description

An authentication method, device and equipment

technical field

The present invention relates to the technical field of network security, and in particular, to an authentication method, device and equipment.

Background technique

Extensible Authentication Protocol (EAP) was first defined in RFC2284 in 1998, and has developed more than 20 EAP-based authentication methods.

In EAP-Transport Layer Security (TLS), X509 certificate is used to authenticate the identity of both communication parties, but in the IoT scenario, the certificate is too large, which will lead to the bottleneck problem of EAP-TLS authentication. EAP-TLS-based Identity Based Signature (IBS) is a digital signature technology based on Identity-Based Cryptograph (IBC) technology by using the original public key to replace the X509 certificate, which can be used for user identity authentication . The function of IBS is the same as that of traditional digital signature, the difference is that when using IBS, the authenticator directly uses the identity ID of the authenticated party to verify the authenticity of the signature, so a complex certificate system is not required, thus solving the problem of too large certificates.

The existing IBS signature scheme is implemented by elliptic curve cryptography (ECC). However, in the usual technical scheme, the elliptic curve type used in the TLS handshake and the elliptic curve type used in the IBS signature are independent, resulting in The operation process of the authentication process is complicated.

SUMMARY OF THE INVENTION

The purpose of the technical solution of the present invention is to provide an authentication method, device and equipment, which solve the problem of complicated computing process in the authentication method in the prior art.

An embodiment of the present invention provides an authentication method, which is applied to a first authentication terminal, wherein the method includes:

Acquire a first handshake message sent by the second authentication terminal; the first handshake message includes at least one elliptic curve type supported by the second authentication terminal;

determining, according to at least one target elliptic curve type in the elliptic curve type, a public key used for key negotiation of the first authenticating end;

sending a second handshake message to the second authentication terminal; the second handshake message includes the target elliptic curve type and the public key;

Using the signature algorithm corresponding to the target elliptic curve type, the identity verification of the identity-based digital signature IBS is performed with the second authentication terminal.

Optionally, the authentication method, wherein a signature algorithm corresponding to the target elliptic curve type is used to perform identity-based digital signature IBS authentication with the second authentication terminal, including:

sending second certificate indication information to the second authentication terminal according to the first certificate indication information in the first handshake message;

Wherein, the second certificate indication information includes:

certificate information, including the identity information of the first authentication terminal, the public parameter information of the first authentication terminal, and the public parameter information of the key generation center to which the first authentication terminal belongs;

Certificate verification information, including a signature value for signing the certificate information using a signature algorithm corresponding to the target elliptic curve type;

The certificate request information includes request information for requesting to use the signature algorithm corresponding to the target elliptic curve type for identity verification.

Optionally, in the authentication method, the public parameter information of the first authenticating end includes: the public key of the first authenticating end used for key negotiation, the signature algorithm, and the public parameters of the signature algorithm hash value.

Optionally, in the authentication method, the first certificate indication information includes:

Signature algorithm information, used to indicate the signature algorithm supported by the second authentication terminal;

first certificate type information, used to indicate the certificate type that the second authentication terminal can handle;

The second certificate type information is used to indicate the certificate type that the second authentication end can provide.

Optionally, in the authentication method, the second certificate indication information further includes:

third certificate type information, used to indicate the certificate type in the certificate payload;

The fourth certificate type information is used to indicate the certificate type required by the second authentication terminal.

Optionally, the authentication method, wherein sending the second certificate indication information to the second authentication terminal includes:

Encrypt the second certificate indication information with a handshake key, wherein the handshake key is obtained by calculation according to the first handshake message and the second handshake message;

Send the encrypted second certificate indication information to the second authentication terminal.

Optionally, the authentication method, wherein the method further comprises:

obtaining the third certificate indication information sent by the second authentication terminal;

A signature algorithm corresponding to the target elliptic curve type is used to perform signature verification on the third certificate indication information.

An embodiment of the present invention further provides an authentication method, which is applied to the second authentication terminal, wherein the method includes:

sending a first handshake message to the first authentication terminal; the first handshake message includes at least one elliptic curve type supported by the second authentication terminal;

acquiring a second handshake message sent by the first authentication terminal in response to the first handshake message; the second handshake message includes a target elliptic curve type selected by the first authentication terminal according to at least one of the elliptic curve types, and the public key for key negotiation of the first authentication terminal determined according to the target elliptic curve type;

Using the signature algorithm corresponding to the target elliptic curve type, the identity verification of the identity-based digital signature IBS is performed with the first authentication terminal.

Optionally, the authentication method, wherein a signature algorithm corresponding to the target elliptic curve type is used to perform identity-based digital signature IBS identity verification with the first authentication terminal, including:

obtaining the second certificate indication information sent by the first authentication terminal;

Using the signature algorithm corresponding to the target elliptic curve type, perform signature verification on the second certificate indication information;

Wherein, the second certificate indication information includes:

certificate information, including the identity information of the first authentication terminal, the public parameter information of the first authentication terminal, and the public parameter information of the key generation center to which the first authentication terminal belongs;

Certificate verification information, including a signature value for signing the certificate information using a signature algorithm corresponding to the target elliptic curve type;

The certificate request information includes request information for requesting to use the signature algorithm corresponding to the target elliptic curve type for identity verification.

Optionally, in the authentication method, the public parameter information of the first authenticating end includes: the public key of the first authenticating end used for key negotiation, the signature algorithm, and the public parameters of the signature algorithm hash value.

Optionally, the authentication method, wherein the first handshake information includes first certificate indication information, wherein the first authentication end sends the second authentication indication information according to the first certificate indication information ;

The first certificate indication information includes:

Signature algorithm information, used to indicate the signature algorithm supported by the second authentication terminal;

first certificate type information, used to indicate the certificate type that the second authentication terminal can handle;

The second certificate type information is used to indicate the certificate type that the second authentication end can provide.

Optionally, in the authentication method, the second certificate indication information further includes:

third certificate type information, used to indicate the certificate type in the certificate payload;

The fourth certificate type information is used to indicate the certificate type required by the second authentication terminal.

Optionally, the authentication method, wherein the signature algorithm corresponding to the target elliptic curve type is used to perform identity-based digital signature IBS authentication with the first authentication terminal, further comprising:

Sending third certificate indication information to the first authentication end, so that the first authentication end uses a signature algorithm corresponding to the target elliptic curve type to perform signature verification on the third certificate indication information.

An embodiment of the present invention further provides an authentication end device, where the authentication end device is a first authentication end, which includes a transceiver and a processor, wherein:

The transceiver is configured to acquire a first handshake message sent by a second authentication terminal; the first handshake message includes at least one elliptic curve type supported by the second authentication terminal;

The processor is configured to, according to at least one target elliptic curve type in the elliptic curve type, determine the public key of the first authentication terminal for key negotiation;

The transceiver is further configured to send a second handshake message to the second authentication terminal; the second handshake message includes the target elliptic curve type and the public key;

The processor is further configured to perform identity-based digital signature IBS authentication with the second authentication terminal by using a signature algorithm corresponding to the target elliptic curve type.

An embodiment of the present invention further provides an authentication end device, where the authentication end device is a second authentication end, which includes a transceiver and a processor, wherein:

The transceiver is configured to send a first handshake message to the first authentication terminal; the first handshake message includes at least one elliptic curve type supported by the second authentication terminal; and

acquiring a second handshake message sent by the first authentication terminal in response to the first handshake message; the second handshake message includes a target elliptic curve type selected by the first authentication terminal according to at least one of the elliptic curve types, and the public key for key negotiation of the first authentication terminal determined according to the target elliptic curve type;

The processor is configured to perform identity-based digital signature IBS identity verification with the first authentication terminal by using a signature algorithm corresponding to the target elliptic curve type.

An embodiment of the present invention further provides an authentication device, which is applied to the first authentication terminal, wherein the device includes:

a first message acquisition module, configured to acquire a first handshake message sent by a second authentication terminal; the first handshake message includes at least one elliptic curve type supported by the second authentication terminal;

a first processing module, configured to determine, according to at least one target elliptic curve type in the elliptic curve type, a public key used for key negotiation of the first authentication end;

a first message sending module, configured to send a second handshake message to the second authentication terminal; the second handshake message includes the target elliptic curve type and the public key;

The second processing module is configured to use the signature algorithm corresponding to the target elliptic curve type to perform identity-based digital signature IBS authentication with the second authentication terminal.

An embodiment of the present invention further provides an authentication device, which is applied to a second authentication terminal, wherein the device includes:

a second message sending module, configured to send a first handshake message to the first authentication terminal; the first handshake message includes at least one elliptic curve type supported by the second authentication terminal;

A second message acquisition module, configured to acquire a second handshake message sent by the first authentication terminal in response to the first handshake message; the second handshake message includes the first authentication terminal according to at least one of the elliptic curve types. the selected target elliptic curve type, and the public key for key negotiation of the first authenticating end determined according to the target elliptic curve type;

The third processing module is configured to use the signature algorithm corresponding to the target elliptic curve type to perform identity-based digital signature IBS authentication with the first authentication terminal.

An embodiment of the present invention also provides an authentication device, which is characterized by comprising: a processor, a memory, and a program stored in the memory and executable on the processor, when the program is executed by the processor Implement the authentication method as described in any of the above.

An embodiment of the present invention further provides a readable storage medium, wherein a program is stored on the readable storage medium, and when the program is executed by a processor, the steps in any of the authentication methods described above are implemented.

At least one of the above-mentioned technical solutions of the present invention has the following beneficial effects:

In the authentication method according to the embodiment of the present invention, the determined target elliptic curve type used for key exchange is multiplexed as the elliptic curve type used for IBS identity verification to determine the signature algorithm, so that the elliptic curve type used for IBS signature The elliptic curve type used in the handshake process with TLS is the same elliptic curve type. The identity authentication method between the first authentication end and the second authentication end has a simple operation process.

Description of drawings

FIG. 1 is a flowchart of one implementation manner of the authentication method according to the embodiment of the present invention;

FIG. 2 is a schematic diagram of an authentication process of EAP-TLS-IBS;

3 is a flowchart of another implementation manner of the authentication method according to the embodiment of the present invention;

FIG. 4 is a schematic structural diagram of an implementation manner of the authentication device according to the embodiment of the present invention;

FIG. 5 is a schematic structural diagram of another implementation manner of the authentication device according to the embodiment of the present invention;

FIG. 6 is a schematic structural diagram of an implementation manner of the authentication apparatus according to the embodiment of the present invention;

FIG. 7 is a schematic structural diagram of another implementation manner of the authentication apparatus according to the embodiment of the present invention;

FIG. 8 is a schematic structural diagram of an implementation manner of the authentication device according to the embodiment of the present invention;

FIG. 9 is a schematic structural diagram of another implementation manner of an authentication device according to an embodiment of the present invention.

Detailed ways

In order to make the technical problems, technical solutions and advantages to be solved by the present invention more clear, the following will be described in detail with reference to the accompanying drawings and specific embodiments.

In order to solve the problem that the authentication method of the prior art is used and the calculation process is complicated, the embodiment of the present invention provides an authentication method, so that the elliptic curve type used in the IBS signature and the elliptic curve type used in the TLS handshake process are multiplexed as The same elliptic curve type is used to solve the problem of complicated operation process in the authentication method using the existing technology.

An embodiment of the present invention provides an authentication method. As shown in FIG. 1 , the authentication method in this embodiment is applied to a first authentication terminal, and the method includes:

S110: Acquire a first handshake message sent by the second authentication terminal; the first handshake message includes at least one elliptic curve type supported by the second authentication terminal;

S120, according to the target elliptic curve type in at least one of the elliptic curve types, determine the public key used for key negotiation of the first authentication terminal;

S130, sending a second handshake message to the second authentication terminal; the second handshake message includes the target elliptic curve type and the public key;

S140, using the signature algorithm corresponding to the target elliptic curve type to perform identity verification based on an identity-based digital signature IBS with the second authentication terminal.

In the authentication method according to the embodiment of the present invention, in steps S110 to S130, during the key exchange process of the TLS handshake between the first authentication end and the second authentication end, the determined target elliptic curve type used for the key exchange is In step S140, it is multiplexed as the elliptic curve type used for IBS authentication to determine the signature algorithm, so that the elliptic curve type used for the IBS signature and the elliptic curve type used in the TLS handshake process are the same elliptic curve type.

In this embodiment of the present invention, optionally, the second authentication end that sends the first handshake message may be referred to as the client, and the first authentication end that receives the first handshake message may be referred to as the server. It should be noted that the client and the server may be two-way authentication, and the names of the first authentication end and the second authentication end as the client and the server may be interchanged.

In the authentication method according to the embodiment of the present invention, steps S110 to S130 are the TSL handshake process. Optionally, the key exchange algorithm used in the TSL handshake process is not limited to using any one of the following algorithms:

Use Diffie-Hellman (DH) key agreement protocol (ECDHE) based on elliptic curve type signcryption scheme (EC, Elliptic Curve);

Only the pre-shared key mode (PSK) is used, that is, PSK-only;

PSK comes with ECDHE.

Taking the key exchange algorithm of ECDHE as an example, optionally, in step S110, the acquired first handshake message sent by the second authentication terminal (such as a client) includes a random number C and an extended parameter, wherein the extended parameter includes The supported version supported_version, the supported group supported_groups, the signature list signatureschemlist and the shared key key_shared of the second authentication terminal. Optionally, the supported group supported_groups carries at least one elliptic curve type supported by the second authenticating end, and the second authenticating end calculates the public key POINT(Ha) for each supported elliptic curve type, optionally, the calculated The public key is carried through the shared key key_shared.

Optionally, the public key POINT(Ha) can be calculated and determined according to the random number C.

Further, after the first authentication terminal obtains the first handshake message sent by the second authentication terminal, the target elliptic curve type is determined according to at least one elliptic curve type carried in the first handshake message, and according to the determined elliptic curve type, Determine the public key of the first authenticator for key negotiation.

Optionally, the public key used for the key negotiation of the first authenticating end is the public key used for the Diffie-Hellman (Diffie-Hellman, DH) key negotiation.

Specifically, the first authenticating end selects the adopted elliptic curve type according to the received first handshake message and determines the corresponding public key POINT(Ha) of the second authenticating end through the shared key key_shared. The key random_S (or the private key db) and the public key of the first authenticating end determine the public key POINT(Hb) of the first authenticating end that is used for key negotiation.

Optionally, the calculation method of the public key used for the secret key negotiation of the second authentication end is: POINT(Ha)=Random_C*base point G; the calculation method of the public key of the first authentication end is: POINT(Hb)=random_S*base point G.

Further, the first authentication terminal also calculates the master key H(X, Y) according to the private key random_S and the public key Ha of the second authentication terminal, and selects the X coordinate of the master key as the handshake key handshake_secret, according to the selected encryption method. , encrypt the second handshake message to be sent by the handshake key handshake_secret. In this embodiment of the present invention, optionally, the elliptic curve type carried in the first handshake message and supported by the second authentication terminal includes but is not limited to only including secp256r1, secp384r1, secp521r1, x25519, and x448. The first authentication end may select one of the above elliptic curve types for key negotiation.

Based on the above-mentioned TSL handshake process, the constructed EAP-TLS-IBS process provides the supported signature algorithm through the signature algorithm signature_algorithm information sent by the second authentication end to the first authentication end, through the server certificate type server_certificate_type and client certificate type client_certificate_type identifies the supported certificate types.

Specifically, as shown in Figure 2, the authentication process of EAP-TLS-IBS mainly includes:

S201, a first authentication end (server) sends an EAP request to a second authentication end (client);

S202, the second authentication terminal sends the first authentication information to the first authentication terminal;

S203, the first authentication end sends the second authentication information to the second authentication end;

S204, the second authentication terminal sends third authentication information to the first authentication terminal;

S205, the authentication ends.

Specifically, the first authentication information includes first handshake information, and the information carried in the first handshake information includes:

supported cipher suites;

Supported version supported_version extension;

Supported groups supported_groups extension, including supported elliptic curve types;

The first certificate indication information.

Wherein, the first certificate indication information includes:

signature algorithm signature_algorithm, used to indicate the IBS signature algorithm supported by the second authentication terminal;

The first certificate type information, which is used to indicate the certificate type that the second authentication terminal can handle; it may also be referred to as the service certificate type server_certificate_type;

The second certificate type information is used to indicate the certificate type that the second authentication end can provide; it may also be referred to as the client certificate type client_certificate_Type.

Based on the first authentication information including the above information, the first authentication terminal sends the second authentication information to the second authentication terminal, and the second authentication information includes the above-mentioned second handshake information and carries the information:

The versions supported_versions supported by the first authenticator include the TLS protocol version number selected by the first authenticator from the supported versions supported_version sent by the second authenticator;

The shared key key_shared extension is used to indicate the target elliptic curve type selected according to the elliptic curve type sent by the second authenticating end, and the public key used for key negotiation calculated by the first authenticating end according to the selected target elliptic curve type. key.

Further, the second authentication information further includes: second certificate indication information.

In this embodiment of the present invention, the second certificate indication information includes:

Certificate information, including the identity information of the first authentication terminal, the public parameter information of the first authentication terminal, and the public parameter information of the key generation center to which the first authentication terminal belongs;

Certificate Verify information, including a signature value for signing the certificate information using a signature algorithm corresponding to the target elliptic curve type;

The certificate request Certificate Reuqest information includes request information for requesting to use the signature algorithm corresponding to the target elliptic curve type for authentication.

Optionally, in the Certificate information, the public parameter information of the first authenticator includes: a public key of the first authenticator used for key negotiation, the signature algorithm, and a hash value of the public parameter of the signature algorithm.

In step S140, using the signature algorithm corresponding to the target elliptic curve type, in the process of performing identity-based digital signature IBS identity verification with the second authenticating end, the first authenticating end uses the first authentication end in the first handshake message according to the first certificate indication information, and send the second certificate indication information to the second authentication end.

With the above-mentioned embodiment, the first authenticating end will select the key exchange algorithm to be used after receiving the first handshake message, that is, select one of the elliptic curve types in the supported_groups as the target elliptic curve type. According to the above, currently supported_groups supports five types of elliptic curve-based key exchange algorithms: secp256r1, secp384r1, secp521r1, x25519, and x448.

On this basis, the public key corresponding to the listed elliptic curve type is pre-stored in the key_share of the first handshake message sent by the second authenticating end. The second handshake message sent by the first authenticating end will clearly indicate the selected elliptic curve type in the shared key extension Keyshare Extension, and the calculated public key of the first authenticating end for key negotiation will be sent to the second authenticating end .

Wherein, after the first authentication end selects the certificate type to be used, the elliptic curve type selected in the key exchange algorithm process is obtained as the signature curve of the IBS.

Because the first authenticating end uses the signature algorithm corresponding to the target elliptic curve type to sign the certificate information, and requests the second authenticating end to use the signature algorithm corresponding to the target elliptic curve type for identity verification through the Certificate Reuqest information After receiving the certificate and certificateVerify, the second authentication terminal uses the identity information serverID, certificate message, and signature value of the first authentication terminal to perform the signature verification operation. Passing the signature verification means that the identity verification is passed. Moreover, the first authentication terminal also performs the same identity verification operation on the second authentication terminal.

With the above embodiment, the key exchange process of the TLS handshake and the elliptic curve type used for the IBS signature are multiplexed into the same elliptic curve type, so as to solve the problem of complicated computing process in the authentication method of the prior art.

Optionally, in the authentication method, after sending the second handshake information, the first authentication end immediately sends Encrypted Extension information, which is the first encrypted data, including extensions unrelated to key negotiation. data, used to indicate to the second authentication terminal.

Further, the second certificate indication information further includes:

The second certificate indication information further includes:

The third certificate type information server_certificate_type is used to indicate the certificate type in the certificate payload;

The fourth certificate type information client_certificate_Type is used to indicate the certificate type required to be provided by the second authentication terminal.

After completing the sending of the above-mentioned second certificate indication information in sequence, the first authentication end sends an end message to the second authentication end, where the end message is also the last message in the identity verification phase, and is used for checking the integrity of the handshake message. In addition, the end message provides key confirmation, binding the identity of the endpoint to the key of the interaction.

Further, after completing the sending of the above-mentioned second certificate indication information, the first authentication end sends application data Application Data, where the application data Application Data is protected by the application key.

Optionally, the method further includes:

Sending second certificate indication information to the second authentication terminal, including:

Encrypt the second certificate indication information with a handshake key, wherein the handshake key is obtained by calculation according to the first handshake message and the second handshake message;

Send the encrypted second certificate indication information to the second authentication terminal.

Specifically, using the key material and the hash values of the Client Hello and Server Hello packets, a handshake_key can be calculated based on the HKDF algorithm, and then the server_certificate_type, client_certificate_Type, Encrypted Extension, Certificate, Certificate Verify, CertificateReuqest, Finished in the handshake phase. Messages are protected by this key.

Optionally, the authentication method according to the embodiment of the present invention further includes:

obtaining the third certificate indication information sent by the second authentication terminal;

A signature algorithm corresponding to the target elliptic curve type is used to perform signature verification on the third certificate indication information.

It should be noted that the third certificate indication information includes:

Certificate information, including public parameter information and user information of the second authentication terminal;

The certificate verification information includes a signature value for signing the certificate information using a signature algorithm corresponding to the target elliptic curve type.

Optionally, the public parameter information of the second authenticator includes: a public key of the second authenticator used for key negotiation, the signature algorithm, and a hash value of the public parameter of the signature algorithm.

The first authentication end uses the signature algorithm corresponding to the target elliptic curve type determined in the above manner to perform a signature verification operation on the certificate information and the signature value according to the third certificate indication information sent by the second authentication end.

Using the above process, the first authentication end also performs the same identity verification operation on the second authentication end through the signature algorithm corresponding to the same target elliptic curve.

The authentication method according to the embodiment of the present invention enables the elliptic curve type used in the IBS signature and the elliptic curve type used in the TLS handshake process to be multiplexed into the same elliptic curve type, which can solve the problem of using the prior art authentication method, computing complex process.

Another aspect of the embodiment of the present invention further provides an authentication method, which is applied to the second authentication terminal. As shown in FIG. 3 , the method includes:

S310: Send a first handshake message to the first authentication terminal; the first handshake message includes at least one elliptic curve type supported by the second authentication terminal;

S320: Acquire a second handshake message sent by the first authentication terminal in response to the first handshake message; the second handshake message includes a target elliptic curve selected by the first authentication terminal according to at least one of the elliptic curve types type, and the public key for key negotiation of the first authenticating end determined according to the target elliptic curve type;

S330, using the signature algorithm corresponding to the target elliptic curve type, to perform the identity verification of the identity-based digital signature IBS with the first authentication terminal.

With the authentication method according to the embodiment of the present invention, in the authentication process of the first authentication end and the second authentication end, the elliptic curve type used in the IBS signature and the elliptic curve type used in the TLS handshake process are multiplexed into the same ellipse The curve type can solve the problem that the authentication method of the prior art is used and the calculation process is complicated.

In this embodiment of the present invention, optionally, the second authentication end that sends the first handshake message may be referred to as the client, and the first authentication end that receives the first handshake message may be referred to as the server. It should be noted that the client and the server may be two-way authentication, and the names of the first authentication end and the second authentication end as the client and the server may be interchanged.

Optionally, the authentication method, wherein, in step S330, using the signature algorithm corresponding to the target elliptic curve type to perform identity-based digital signature IBS authentication with the first authentication terminal, including:

obtaining the second certificate indication information sent by the first authentication terminal;

Using the signature algorithm corresponding to the target elliptic curve type, perform signature verification on the second certificate indication information;

Wherein, the second certificate indication information includes:

certificate information, including the identity information of the first authentication terminal, the public parameter information of the first authentication terminal, and the public parameter information of the key generation center to which the first authentication terminal belongs;

Certificate verification information, including a signature value for signing the certificate information using a signature algorithm corresponding to the target elliptic curve type;

The certificate request information includes request information for requesting to use the signature algorithm corresponding to the target elliptic curve type for identity verification.

Optionally, in the authentication method, the public parameter information of the first authenticating end includes: the public key of the first authenticating end used for key negotiation, the signature algorithm, and the public parameters of the signature algorithm hash value.

Optionally, the authentication method, wherein the first handshake information includes first certificate indication information, wherein the first authentication end sends the second authentication indication information according to the first certificate indication information ;

The first certificate indication information includes:

Signature algorithm information, used to indicate the signature algorithm supported by the second authentication terminal;

first certificate type information, used to indicate the certificate type that the second authentication terminal can handle;

The second certificate type information is used to indicate the certificate type that the second authentication end can provide.

Optionally, in the authentication method, the second certificate indication information further includes:

third certificate type information, used to indicate the certificate type in the certificate payload;

The fourth certificate type information is used to indicate the certificate type required by the second authentication terminal.

Optionally, the authentication method, wherein the signature algorithm corresponding to the target elliptic curve type is used to perform identity-based digital signature IBS authentication with the first authentication terminal, further comprising:

Sending third certificate indication information to the first authentication end, so that the first authentication end uses a signature algorithm corresponding to the target elliptic curve type to perform signature verification on the third certificate indication information.

In this embodiment of the present invention, the content of each information included in the first authentication indication information, the second authentication indication information, and the third authentication indication information, and the authentication process of the first authentication end and the second authentication end may refer to the above detailed description, It will not be described here.

An embodiment of the present invention further provides an authentication end device, where the authentication end device is a first authentication end, as shown in FIG. 4 , including a transceiver 410 and a processor 420, wherein:

The transceiver 410 is configured to obtain a first handshake message sent by the second authentication terminal; the first handshake message includes at least one elliptic curve type supported by the second authentication terminal;

The processor 420 is configured to, according to the target elliptic curve type in at least one of the elliptic curve types, determine the public key used for key negotiation of the first authentication end;

The transceiver 410 is further configured to send a second handshake message to the second authentication terminal; the second handshake message includes the target elliptic curve type and the public key;

The processor 420 is further configured to use the signature algorithm corresponding to the target elliptic curve type to perform identity-based digital signature IBS authentication with the second authentication terminal.

Optionally, in the authentication device, wherein the processor 420 adopts a signature algorithm corresponding to the target elliptic curve type to perform identity-based digital signature IBS authentication with the second authentication terminal, including:

sending second certificate indication information to the second authentication terminal according to the first certificate indication information in the first handshake message;

Wherein, the second certificate indication information includes:

certificate information, including the identity information of the first authentication terminal, the public parameter information of the first authentication terminal, and the public parameter information of the key generation center to which the first authentication terminal belongs;

Certificate verification information, including a signature value for signing the certificate information using a signature algorithm corresponding to the target elliptic curve type;

The certificate request information includes request information for requesting to use the signature algorithm corresponding to the target elliptic curve type for identity verification.

Optionally, the authentication device, wherein the public parameter information of the first authenticating end includes: the public key of the first authenticating end used for key negotiation, the signature algorithm, and the public parameters of the signature algorithm hash value.

Optionally, the authentication device, wherein the first certificate indication information includes:

Signature algorithm information, used to indicate the signature algorithm supported by the second authentication terminal;

first certificate type information, used to indicate the certificate type that the second authentication terminal can handle;

The second certificate type information is used to indicate the certificate type that the second authentication end can provide.

Optionally, the authentication device, wherein the second certificate indication information further includes:

third certificate type information, used to indicate the certificate type in the certificate payload;

The fourth certificate type information is used to indicate the certificate type required by the second authentication terminal.

Optionally, in the authentication device, wherein the processor 420 sends the second certificate indication information to the second authentication terminal, including:

Encrypt the second certificate indication information with a handshake key, wherein the handshake key is obtained by calculation according to the first handshake message and the second handshake message;

Send the encrypted second certificate indication information to the second authentication terminal.

Optionally, in the authentication device, the processor 420 is further configured to:

obtaining the third certificate indication information sent by the second authentication terminal;

A signature algorithm corresponding to the target elliptic curve type is used to perform signature verification on the third certificate indication information.

An embodiment of the present invention further provides an authentication end device, where the authentication end device is a second authentication end, as shown in FIG. 5 , including a transceiver 510 and a processor 520, wherein:

The transceiver 510 is configured to send a first handshake message to the first authentication terminal; the first handshake message includes at least one elliptic curve type supported by the second authentication terminal; and

acquiring a second handshake message sent by the first authentication terminal in response to the first handshake message; the second handshake message includes a target elliptic curve type selected by the first authentication terminal according to at least one of the elliptic curve types, and the public key for key negotiation of the first authentication terminal determined according to the target elliptic curve type;

The processor 520 is configured to use the signature algorithm corresponding to the target elliptic curve type to perform identity-based digital signature IBS authentication with the first authentication terminal.

Optionally, in the authentication apparatus, wherein the processor 520 adopts a signature algorithm corresponding to the target elliptic curve type to perform identity-based digital signature IBS authentication with the first authentication terminal, including:

obtaining the second certificate indication information sent by the first authentication terminal;

Using the signature algorithm corresponding to the target elliptic curve type, perform signature verification on the second certificate indication information;

Wherein, the second certificate indication information includes:

certificate information, including the identity information of the first authentication terminal, the public parameter information of the first authentication terminal, and the public parameter information of the key generation center to which the first authentication terminal belongs;

Certificate verification information, including a signature value for signing the certificate information using a signature algorithm corresponding to the target elliptic curve type;

The certificate request information includes request information for requesting to use the signature algorithm corresponding to the target elliptic curve type for identity verification.

Optionally, the authentication apparatus, wherein the public parameter information of the first authenticating end includes: the public key of the first authenticating end used for key negotiation, the signature algorithm, and the public parameters of the signature algorithm hash value.

Optionally, the authentication apparatus, wherein the first handshake information includes first certificate indication information, wherein the first authentication end sends the second authentication indication information according to the first certificate indication information ;

The first certificate indication information includes:

Signature algorithm information, used to indicate the signature algorithm supported by the second authentication terminal;

first certificate type information, used to indicate the certificate type that the second authentication terminal can handle;

The second certificate type information is used to indicate the certificate type that the second authentication end can provide.

Optionally, in the authentication apparatus, the second certificate indication information further includes:

third certificate type information, used to indicate the certificate type in the certificate payload;

The fourth certificate type information is used to indicate the certificate type required by the second authentication terminal.

Optionally, in the authentication apparatus, wherein the processor 520 uses a signature algorithm corresponding to the target elliptic curve type to perform identity verification based on the identity-based digital signature IBS with the first authentication terminal, further comprising:

Sending third certificate indication information to the first authentication end, so that the first authentication end uses a signature algorithm corresponding to the target elliptic curve type to perform signature verification on the third certificate indication information.

An embodiment of the present invention further provides an authentication device, which is applied to the first authentication terminal. As shown in FIG. 6 , the device includes:

A first message acquisition module 610, configured to acquire a first handshake message sent by a second authentication terminal; the first handshake message includes at least one elliptic curve type supported by the second authentication terminal;

a first processing module 620, configured to determine, according to at least one target elliptic curve type in the elliptic curve type, a public key used for key negotiation of the first authentication end;

a first message sending module 630, configured to send a second handshake message to the second authentication terminal; the second handshake message includes the target elliptic curve type and the public key;

The second processing module 640 is configured to use the signature algorithm corresponding to the target elliptic curve type to perform identity-based digital signature IBS identity verification with the second authentication terminal.

Optionally, in the authentication apparatus, wherein the second processing module 640 adopts the signature algorithm corresponding to the target elliptic curve type to perform identity verification based on the digital signature IBS with the second authentication terminal, including:

sending second certificate indication information to the second authentication terminal according to the first certificate indication information in the first handshake message;

Wherein, the second certificate indication information includes:

certificate information, including the identity information of the first authentication terminal, the public parameter information of the first authentication terminal, and the public parameter information of the key generation center to which the first authentication terminal belongs;

Certificate verification information, including a signature value for signing the certificate information using a signature algorithm corresponding to the target elliptic curve type;

The certificate request information includes request information for requesting to use the signature algorithm corresponding to the target elliptic curve type for identity verification.

Optionally, the authentication apparatus, wherein the public parameter information of the first authenticating end includes: the public key of the first authenticating end used for key negotiation, the signature algorithm, and the public parameters of the signature algorithm hash value.

Optionally, the authentication device, wherein the first certificate indication information includes:

Signature algorithm information, used to indicate the signature algorithm supported by the second authentication terminal;

first certificate type information, used to indicate the certificate type that the second authentication terminal can handle;

The second certificate type information is used to indicate the certificate type that the second authentication end can provide.

Optionally, in the authentication apparatus, the second certificate indication information further includes:

third certificate type information, used to indicate the certificate type in the certificate payload;

The fourth certificate type information is used to indicate the certificate type required by the second authentication terminal.

Optionally, the authentication apparatus, wherein sending the second certificate indication information to the second authentication terminal includes:

Encrypt the second certificate indication information with a handshake key, wherein the handshake key is obtained by calculation according to the first handshake message and the second handshake message;

Send the encrypted second certificate indication information to the second authentication terminal.

Optionally, in the authentication device, the second processing module 640 is further configured to:

obtaining the third certificate indication information sent by the second authentication terminal;

A signature algorithm corresponding to the target elliptic curve type is used to perform signature verification on the third certificate indication information.

An embodiment of the present invention further provides an authentication device, which is applied to the second authentication terminal. As shown in FIG. 7 , the device includes:

The second message sending module 710 is configured to send a first handshake message to the first authentication terminal; the first handshake message includes at least one elliptic curve type supported by the second authentication terminal;

A second message acquisition module 720, configured to acquire a second handshake message sent by the first authentication terminal in response to the first handshake message; the second handshake message includes the first authentication terminal according to at least one of the elliptic curves. the target elliptic curve type selected by the type, and the public key used for key negotiation of the first authenticating end determined according to the target elliptic curve type;

The third processing module 730 is configured to use the signature algorithm corresponding to the target elliptic curve type to perform identity-based digital signature IBS authentication with the first authentication terminal.

Optionally, in the authentication apparatus, wherein the third processing module 730 adopts the signature algorithm corresponding to the target elliptic curve type to perform identity verification based on the digital signature IBS with the first authentication terminal, including:

obtaining the second certificate indication information sent by the first authentication terminal;

Using the signature algorithm corresponding to the target elliptic curve type, perform signature verification on the second certificate indication information;

Wherein, the second certificate indication information includes:

certificate information, including the identity information of the first authentication terminal, the public parameter information of the first authentication terminal, and the public parameter information of the key generation center to which the first authentication terminal belongs;

Certificate verification information, including a signature value for signing the certificate information using a signature algorithm corresponding to the target elliptic curve type;

The certificate request information includes request information for requesting to use the signature algorithm corresponding to the target elliptic curve type for identity verification.

Optionally, the authentication apparatus, wherein the public parameter information of the first authenticating end includes: the public key of the first authenticating end used for key negotiation, the signature algorithm, and the public parameters of the signature algorithm hash value.

Optionally, the authentication apparatus, wherein the first handshake information includes first certificate indication information, wherein the first authentication end sends the second authentication indication information according to the first certificate indication information ;

The first certificate indication information includes:

Signature algorithm information, used to indicate the signature algorithm supported by the second authentication terminal;

first certificate type information, used to indicate the certificate type that the second authentication terminal can handle;

The second certificate type information is used to indicate the certificate type that the second authentication end can provide.

Optionally, in the authentication apparatus, the second certificate indication information further includes:

third certificate type information, used to indicate the certificate type in the certificate payload;

The fourth certificate type information is used to indicate the certificate type required by the second authentication terminal.

Optionally, in the authentication device, wherein the third processing module 730 adopts the signature algorithm corresponding to the target elliptic curve type to perform identity verification based on the digital signature IBS with the first authentication terminal, further comprising:

Sending third certificate indication information to the first authentication end, so that the first authentication end uses a signature algorithm corresponding to the target elliptic curve type to perform signature verification on the third certificate indication information.

Another aspect of an embodiment of the present invention further provides an authentication device. Optionally, the authentication device is a first authentication terminal, as shown in FIG. 8 , including: a processor 801 ; and a bus interface 802 communicates with the processor A memory 803 connected to 801 is used for storing programs and data used by the processor 801 when performing operations, and the processor 801 calls and executes the programs and data stored in the memory 803 .

Wherein, the transceiver 804 is connected with the bus interface 802, and is used for receiving and sending data under the control of the processor 801. Specifically, the processor 801 is used to read the program in the memory 803, and execute the following process:

Acquire a first handshake message sent by the second authentication terminal; the first handshake message includes at least one elliptic curve type supported by the second authentication terminal;

determining, according to at least one target elliptic curve type in the elliptic curve type, a public key used for key negotiation of the first authenticating end;

sending a second handshake message to the second authentication terminal; the second handshake message includes the target elliptic curve type and the public key;

Using the signature algorithm corresponding to the target elliptic curve type, the identity verification of the identity-based digital signature IBS is performed with the second authentication terminal.

Optionally, in the authentication device, wherein the processor 801 adopts the signature algorithm corresponding to the target elliptic curve type to perform the identity verification based on the identity-based digital signature IBS with the second authentication terminal, including:

sending second certificate indication information to the second authentication terminal according to the first certificate indication information in the first handshake message;

Wherein, the second certificate indication information includes:

certificate information, including the identity information of the first authentication terminal, the public parameter information of the first authentication terminal, and the public parameter information of the key generation center to which the first authentication terminal belongs;

Certificate verification information, including a signature value for signing the certificate information using a signature algorithm corresponding to the target elliptic curve type;

The certificate request information includes request information for requesting to use the signature algorithm corresponding to the target elliptic curve type for identity verification.

Optionally, the authentication device, wherein the public parameter information of the first authenticating end includes: the public key of the first authenticating end used for key negotiation, the signature algorithm, and the public parameters of the signature algorithm hash value.

Optionally, the authentication device, wherein the first certificate indication information includes:

Signature algorithm information, used to indicate the signature algorithm supported by the second authentication terminal;

first certificate type information, used to indicate the certificate type that the second authentication terminal can handle;

The second certificate type information is used to indicate the certificate type that the second authentication end can provide.

Optionally, the authentication device, wherein the second certificate indication information further includes:

third certificate type information, used to indicate the certificate type in the certificate payload;

The fourth certificate type information is used to indicate the certificate type required by the second authentication terminal.

Optionally, the authentication device, wherein sending the second certificate indication information to the second authentication terminal includes:

Encrypt the second certificate indication information with a handshake key, wherein the handshake key is obtained by calculation according to the first handshake message and the second handshake message;

Send the encrypted second certificate indication information to the second authentication terminal.

Optionally, in the authentication device, the processor 801 is further configured to:

obtaining the third certificate indication information sent by the second authentication terminal;

A signature algorithm corresponding to the target elliptic curve type is used to perform signature verification on the third certificate indication information.

8, the bus architecture may include any number of interconnected buses and bridges, specifically, one or more processors represented by processor 801 and various circuits of memory represented by memory 803 are linked together. The bus architecture may also link together various other circuits, such as peripherals, voltage regulators, and power management circuits, which are well known in the art and, therefore, will not be described further herein. The bus interface provides the interface. Transceiver 804 may be a number of elements, including a transmitter and a receiver, that provide a means for communicating with various other devices over a transmission medium. The processor 801 is responsible for managing the bus architecture and general processing, and the memory 803 may store data used by the processor 801 in performing operations.

Those skilled in the art can understand that all or part of the steps of implementing the above-mentioned embodiments can be completed by hardware, or can be completed by instructing relevant hardware through a program, and the program includes instructions for executing part or all of the steps of the above-mentioned method; and The program may be stored in a readable storage medium, which may be any form of storage medium.

Another aspect of an embodiment of the present invention further provides an authentication device. Optionally, the authentication device is a second authentication terminal, as shown in FIG. 9 , including: a processor 901 ; and a bus interface 902 communicates with the processor 901 is connected to a memory 903, the memory 903 is used for storing programs and data used by the processor 901 when performing operations, and the processor 901 calls and executes the programs and data stored in the memory 903.

Wherein, the transceiver 904 is connected with the bus interface 902, and is used for receiving and sending data under the control of the processor 901. Specifically, the processor 901 is used to read the program in the memory 903, and execute the following process:

sending a first handshake message to the first authentication terminal; the first handshake message includes at least one elliptic curve type supported by the second authentication terminal;

acquiring a second handshake message sent by the first authentication terminal in response to the first handshake message; the second handshake message includes a target elliptic curve type selected by the first authentication terminal according to at least one of the elliptic curve types, and the public key for key negotiation of the first authentication terminal determined according to the target elliptic curve type;

Using the signature algorithm corresponding to the target elliptic curve type, the identity verification of the identity-based digital signature IBS is performed with the first authentication terminal.

Optionally, in the authentication device, wherein the processor 901 adopts the signature algorithm corresponding to the target elliptic curve type, and performs the identity verification based on the identity-based digital signature IBS with the first authentication terminal, including:

obtaining the second certificate indication information sent by the first authentication terminal;

Using the signature algorithm corresponding to the target elliptic curve type, perform signature verification on the second certificate indication information;

Wherein, the second certificate indication information includes:

certificate information, including the identity information of the first authentication terminal, the public parameter information of the first authentication terminal, and the public parameter information of the key generation center to which the first authentication terminal belongs;

Certificate verification information, including a signature value for signing the certificate information using a signature algorithm corresponding to the target elliptic curve type;

The certificate request information includes request information for requesting to use the signature algorithm corresponding to the target elliptic curve type for identity verification.

Optionally, the authentication device, wherein the public parameter information of the first authenticating end includes: the public key of the first authenticating end used for key negotiation, the signature algorithm, and the public parameters of the signature algorithm hash value.

Optionally, the authentication device, wherein the first handshake information includes first certificate indication information, wherein the first authentication end sends the second authentication indication information according to the first certificate indication information ;

The first certificate indication information includes:

Signature algorithm information, used to indicate the signature algorithm supported by the second authentication terminal;

first certificate type information, used to indicate the certificate type that the second authentication terminal can handle;

The second certificate type information is used to indicate the certificate type that the second authentication end can provide.

Optionally, the authentication device, wherein the second certificate indication information further includes:

third certificate type information, used to indicate the certificate type in the certificate payload;

The fourth certificate type information is used to indicate the certificate type required by the second authentication terminal.

Optionally, in the authentication device, wherein the processor 901 adopts the signature algorithm corresponding to the target elliptic curve type to perform identity verification based on the digital signature IBS with the first authentication terminal, further comprising:

Sending third certificate indication information to the first authentication end, so that the first authentication end uses a signature algorithm corresponding to the target elliptic curve type to perform signature verification on the third certificate indication information.

9, the bus architecture may include any number of interconnected buses and bridges, specifically, one or more processors represented by processor 901 and various circuits of memory represented by memory 903 are linked together. The bus architecture may also link together various other circuits, such as peripherals, voltage regulators, and power management circuits, which are well known in the art and, therefore, will not be described further herein. The bus interface provides the interface. Transceiver 904 may be a number of elements, including a transmitter and a receiver, that provide a means for communicating with various other devices over a transmission medium. The processor 901 is responsible for managing the bus architecture and general processing, and the memory 903 may store data used by the processor 901 in performing operations.

Those skilled in the art can understand that all or part of the steps of implementing the above-mentioned embodiments can be completed by hardware, or can be completed by instructing relevant hardware through a program, and the program includes instructions for executing part or all of the steps of the above-mentioned method; and The program may be stored in a readable storage medium, which may be any form of storage medium.

In addition, specific embodiments of the present invention also provide a computer-readable storage medium on which a computer program is stored, wherein when the program is executed by a processor, the steps in any one of the authentication methods described above are implemented.

In the several embodiments provided in this application, it should be understood that the disclosed method and apparatus may be implemented in other manners. For example, the apparatus embodiments described above are only illustrative. For example, the division of the units is only a logical function division. In actual implementation, there may be other division methods. For example, multiple units or components may be combined or Can be integrated into another system, or some features can be ignored, or not implemented. On the other hand, the shown or discussed mutual coupling or direct coupling or communication connection may be through some interfaces, indirect coupling or communication connection of devices or units, and may be in electrical, mechanical or other forms.

In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may be physically included individually, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware, or may be implemented in the form of hardware plus software functional units.

The above-mentioned integrated units implemented in the form of software functional units can be stored in a computer-readable storage medium. The above-mentioned software functional unit is stored in a storage medium, and includes several instructions to enable a computer device (which may be a personal computer, a server, or a network device, etc.) to execute part of the steps of the transceiving method described in the various embodiments of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, Read-Only Memory (ROM for short), Random Access Memory (RAM for short), magnetic disk or CD, etc. that can store program codes medium.

The above are the preferred embodiments of the present invention. It should be pointed out that for those skilled in the art, several improvements and modifications can be made without departing from the principles of the present invention, and these improvements and modifications should also be considered as It is the protection scope of the present invention.

Claims (19)

1. An authentication method, applied to a first authentication terminal, characterized in that the method comprises: Acquire a first handshake message sent by the second authentication terminal; the first handshake message includes at least one elliptic curve type supported by the second authentication terminal; determining, according to at least one target elliptic curve type in the elliptic curve type, a public key used for key negotiation of the first authenticating end; sending a second handshake message to the second authentication terminal; the second handshake message includes the target elliptic curve type and the public key; Using the signature algorithm corresponding to the target elliptic curve type, the identity verification of the identity-based digital signature IBS is performed with the second authentication terminal. 2. The authentication method according to claim 1, characterized in that, using the signature algorithm corresponding to the target elliptic curve type to carry out the identity verification of the identity-based digital signature IBS with the second authentication terminal, comprising: sending second certificate indication information to the second authentication terminal according to the first certificate indication information in the first handshake message; Wherein, the second certificate indication information includes: certificate information, including the identity information of the first authentication terminal, the public parameter information of the first authentication terminal, and the public parameter information of the key generation center to which the first authentication terminal belongs; Certificate verification information, including a signature value for signing the certificate information using a signature algorithm corresponding to the target elliptic curve type; The certificate request information includes request information for requesting to use the signature algorithm corresponding to the target elliptic curve type for identity verification. 3 . The authentication method according to claim 2 , wherein the public parameter information of the first authenticating end comprises: the public key of the first authenticating end used for key negotiation, the signature algorithm and the signature. 3 . A hash of the public parameters of the algorithm. 4. The authentication method according to claim 2, wherein the first certificate indication information comprises: Signature algorithm information, used to indicate the signature algorithm supported by the second authentication terminal; first certificate type information, used to indicate the certificate type that the second authentication terminal can handle; The second certificate type information is used to indicate the certificate type that the second authentication end can provide. 5. The authentication method according to claim 2, wherein the second certificate indication information further comprises: third certificate type information, used to indicate the certificate type in the certificate payload; The fourth certificate type information is used to indicate the certificate type required by the second authentication terminal. 6. The authentication method according to claim 2, wherein sending the second certificate indication information to the second authentication terminal comprises: Encrypt the second certificate indication information by using a handshake key, wherein the handshake key is obtained by calculation according to the first handshake message and the second handshake message; Send the encrypted second certificate indication information to the second authentication terminal. 7. The authentication method according to claim 2, wherein the method further comprises: obtaining the third certificate indication information sent by the second authentication terminal; A signature algorithm corresponding to the target elliptic curve type is used to perform signature verification on the third certificate indication information. 8. An authentication method, applied to a second authentication terminal, characterized in that the method comprises: sending a first handshake message to the first authentication terminal; the first handshake message includes at least one elliptic curve type supported by the second authentication terminal; acquiring a second handshake message sent by the first authentication terminal in response to the first handshake message; the second handshake message includes a target elliptic curve type selected by the first authentication terminal according to at least one of the elliptic curve types, and the public key for key negotiation of the first authentication terminal determined according to the target elliptic curve type; Using the signature algorithm corresponding to the target elliptic curve type, the identity verification of the identity-based digital signature IBS is performed with the first authentication terminal. 9. The authentication method according to claim 8, characterized in that, using a signature algorithm corresponding to the target elliptic curve type to perform identity verification of an identity-based digital signature (IBS) with the first authentication terminal, comprising: obtaining the second certificate indication information sent by the first authentication terminal; Using the signature algorithm corresponding to the target elliptic curve type, perform signature verification on the second certificate indication information; Wherein, the second certificate indication information includes: certificate information, including the identity information of the first authentication terminal, the public parameter information of the first authentication terminal, and the public parameter information of the key generation center to which the first authentication terminal belongs; Certificate verification information, including a signature value for signing the certificate information using a signature algorithm corresponding to the target elliptic curve type; The certificate request information includes request information for requesting to use the signature algorithm corresponding to the target elliptic curve type for identity verification. 10 . The authentication method according to claim 9 , wherein the public parameter information of the first authenticating end comprises: the public key of the first authenticating end used for key negotiation, the signature algorithm and the signature. 10 . A hash of the public parameters of the algorithm. 11 . The authentication method according to claim 9 , wherein the first handshake information includes first certificate indication information, wherein the first authentication end sends the first certificate indication information according to the first certificate indication information. 12 . 2. Authentication instruction information; The first certificate indication information includes: Signature algorithm information, used to indicate the signature algorithm supported by the second authentication terminal; first certificate type information, used to indicate the certificate type that the second authentication terminal can handle; The second certificate type information is used to indicate the certificate type that the second authentication end can provide. 12. The authentication method according to claim 11, wherein the second certificate indication information further comprises: third certificate type information, used to indicate the certificate type in the certificate payload; The fourth certificate type information is used to indicate the certificate type required by the second authentication terminal. 13. The authentication method according to claim 9, characterized in that, using a signature algorithm corresponding to the target elliptic curve type to perform identity verification based on an identity-based digital signature (IBS) with the first authentication terminal, further comprising: Sending third certificate indication information to the first authentication end, so that the first authentication end uses a signature algorithm corresponding to the target elliptic curve type to perform signature verification on the third certificate indication information. 14. An authentication end device, the authentication end device being a first authentication end, characterized in that it comprises a transceiver and a processor, wherein: The transceiver is configured to acquire a first handshake message sent by a second authentication terminal; the first handshake message includes at least one elliptic curve type supported by the second authentication terminal; The processor is configured to, according to at least one target elliptic curve type in the elliptic curve type, determine the public key of the first authentication terminal for key negotiation; The transceiver is further configured to send a second handshake message to the second authentication terminal; the second handshake message includes the target elliptic curve type and the public key; The processor is further configured to perform identity-based digital signature IBS authentication with the second authentication terminal by using a signature algorithm corresponding to the target elliptic curve type. 15. An authentication end device, the authentication end device being a second authentication end, characterized in that it comprises a transceiver and a processor, wherein: The transceiver is configured to send a first handshake message to the first authentication terminal; the first handshake message includes at least one elliptic curve type supported by the second authentication terminal; and acquiring a second handshake message sent by the first authentication terminal in response to the first handshake message; the second handshake message includes a target elliptic curve type selected by the first authentication terminal according to at least one of the elliptic curve types, and the public key for key negotiation of the first authentication terminal determined according to the target elliptic curve type; The processor is configured to perform identity-based digital signature IBS identity verification with the first authentication terminal by using a signature algorithm corresponding to the target elliptic curve type. 16. An authentication device, applied to a first authentication terminal, characterized in that the device comprises: a first message acquisition module, configured to acquire a first handshake message sent by a second authentication terminal; the first handshake message includes at least one elliptic curve type supported by the second authentication terminal; a first processing module, configured to determine, according to at least one target elliptic curve type in the elliptic curve type, a public key used for key negotiation of the first authentication end; a first message sending module, configured to send a second handshake message to the second authentication terminal; the second handshake message includes the target elliptic curve type and the public key; The second processing module is configured to use the signature algorithm corresponding to the target elliptic curve type to perform identity-based digital signature IBS authentication with the second authentication terminal. 17. An authentication device, applied to a second authentication terminal, characterized in that the device comprises: a second message sending module, configured to send a first handshake message to the first authentication terminal; the first handshake message includes at least one elliptic curve type supported by the second authentication terminal; A second message acquisition module, configured to acquire a second handshake message sent by the first authentication terminal in response to the first handshake message; the second handshake message includes the first authentication terminal according to at least one of the elliptic curve types. the selected target elliptic curve type, and the public key for key negotiation of the first authenticating end determined according to the target elliptic curve type; The third processing module is configured to use the signature algorithm corresponding to the target elliptic curve type to perform identity-based digital signature IBS authentication with the first authentication terminal. 18. An authentication device, comprising: a processor, a memory, and a program stored on the memory and executable on the processor, the program being executed by the processor to achieve the method as claimed in the claims The authentication method of any one of 1 to 7, or the authentication method of any one of claims 8 to 13 is implemented. 19. A readable storage medium, wherein a program is stored on the readable storage medium, and when the program is executed by a processor, the steps in the authentication method according to any one of claims 1 to 7 are implemented , or implement the steps in the authentication method according to any one of claims 8 to 13 .

Images