Cyber security authentication method for non-internet electronic device

A cyber security authentication method, comprising:

• in a user device:
• randomly generating an ephemeral decryption key, transmitting the ephemeral decryption key to a security server, and retrieving a key index from the security server;
• encrypting an identity information based on a part of the ephemeral decryption key to generate an electronic digital signature and an authentication token;
• and
• combining one of the key index, the electronic digital signature, and the authentication token to form an ephemeral certificate and transmitting the ephemeral certificate to a non-Internet electronic device;
• and
• in the non-Internet electronic device:
• parsing the ephemeral certificate to obtain the key index;
• and
• forwarding the key index to the security server via a transport connection comprising the user device to retrieve the ephemeral decryption key from the security server based on the key index,
• wherein the cyber security authentication method further comprises one of the following steps:
• in the non-Internet electronic device:
• requesting the user device to perform a network transport service to establish the transport connection and forwarding the key index to the security server via the user device to retrieve the ephemeral decryption key based on the key index;
• parsing the ephemeral certificate to obtain the key index, the electronic digital signature, and the authentication token;
• decrypting the authentication token based on a second part of the ephemeral decryption key to obtain the electronic digital signature;
• decrypting the electronic digital signature based on a first part of the ephemeral decryption key to obtain the identity information;
• implementing a signature verification process to verify whether the electronic digital signature is correctly signed;
• implementing an identity authentication process to verify whether the identity information is correctly matched to the record if the electronic digital signature is correctly signed;
• and
• accepting a connection request from the user device if the verification results of the signature verification process and the identity authentication process are correct, otherwise rejecting the connection request.