Identity authentication method and apparatus, storage medium, program, and program product

A requester, comprising:

• a processor;
• and a memory for storing instructions executable by the processor, wherein the processor is configured to:
• acquire an authentication result message sent by an authentication access controller, the authentication result message comprising authentication result information that is obtained by the authentication access controller by using a message encryption key to encrypt to-be-encrypted data comprising an identity authentication result information ciphertext, a digital signature of a second authentication server trusted by the requester, and a protection nonce, wherein the identity authentication result information ciphertext is generated by a first authentication server trusted by the authentication access controller by using the protection nonce to encrypt information comprising identity authentication result information of the authentication access controller, and the identity authentication result information comprises a verification result of a digital certificate of the authentication access controller;
• use the message encryption key to decrypt the authentication result information to obtain the protection nonce, the identity authentication result information ciphertext, and the digital signature of the second authentication server;
• use a public key of the second authentication server to verify the digital signature of the second authentication server, wherein the decryption portion is further configured to use the protection nonce to decrypt the identity authentication result information ciphertext to obtain the identity authentication result information of the authentication access controller responsive to that verification for the digital signature of the second authentication server is successful;
• and
• determine an identity authentication result of the authentication access controller according to the verification result of the digital certificate in the identity authentication result information.

A first authentication server, trusted by an authentication access controller, the first authentication server comprising:

• a processor;
• and a memory for storing instructions executable by the processor, wherein the processor is configured to:
• acquire a first authentication request message sent by the authentication access controller, the first authentication request message comprising an identity information ciphertext that is obtained by the authentication access controller by using a public key of an encryption certificate to encrypt information comprising a digital certificate of the authentication access controller and a protection nonce;
• use a private key corresponding to the encryption certificate to decrypt the identity information ciphertext to obtain the digital certificate and the protection nonce;
• perform legality verification on the digital certificate to obtain a verification result of the digital certificate of the authentication access controller;
• and
• generate identity authentication result information of the authentication access controller according to information comprising the verification result, and further configured to use the protection nonce to encrypt information comprising the identity authentication result information to generate the identity authentication result information ciphertext, and perform calculation on to-be-signed data comprising the identity authentication result information ciphertext to generate a digital signature of the first authentication server.