Security Authentication Method, Device, and System

A security authentication system, comprising:

• a first device;
• and
• a second device,
• wherein the first device sends a first message to the second device,
• wherein the first message comprises first key information such that the second device executes, after receiving the first message, a dynamic key exchange algorithm according to the first key information, to generate at least one encryption key,
• wherein the first device receives a second message returned by the second device to the first device, wherein the second message comprises second key information, and the first device executes a dynamic key exchange algorithm according to the second key information, to generate at least one encryption key,
• wherein the first device sends a third message to the second device, wherein the third message comprises a first hash value of the first device and a second hash value of the first device, wherein the first hash value of the first device is generated according to a first random number of the first device and a first part of a first mapping key, and the second hash value of the first device is generated according to a second random number of the first device and a second part of the first mapping key such that the second device determines, after receiving the third message, to return a fourth message to the first device, wherein the first mapping key is generated according to an initial key of the first device and a first predetermined algorithm,
• wherein the first device receives the fourth message sent by the second device, wherein the fourth message comprises a first hash value of the second device, a second hash value of the second device, and a first encrypted random number of the second device, wherein the first hash value of the second device is generated according to the first random number of the second device and a first part of a second mapping key, the second hash value of the second device is generated according to a second random number of the second device and a second part of the second mapping key, the first encrypted random number of the second device is obtained by encrypting a first random number of the second device by using the encryption key, and the second mapping key is generated according to an initial key of the second device and the first predetermined algorithm such that the first device performs authentication on the first hash value of the second device according to the first random number of the second device and the first mapping key, and when the first hash value of the second device is correct, determines to return a fifth message to the second device,
• wherein the first device sends the fifth message to the second device, wherein the fifth message comprises the first random number that is of the first device and is obtained after encryption by using the encryption key such that the second device performs authentication on the first hash value of the first device according to the first random number of the first device and the second mapping key, and when the first hash value of the first device is correct, determines to return a sixth message to the first device;
• wherein the first device receives the sixth message, wherein the sixth message comprises the second random number that is of the second device and is obtained after encryption by using the encryption key such that the first device performs authentication on the second hash value of the second device according to the second random number of the second device and the first mapping key, and when the second hash value of the second device is correct, which indicates that the authentication performed by the first device on the second device succeeds, determines to return a seventh message to the second device, and
• wherein the first device sends the seventh message to the second device, wherein the seventh message comprises the second random number that is of the first device and is obtained after encryption by using the encryption key such that the second device performs authentication on the second hash value of the first device according to the second random number of the first device and the second mapping key, wherein when the second hash value of the first device is correct, it indicates that the authentication performed by the second device on the first device succeeds.

A first device for security authentication configured to perform security authentication on a second device, wherein the first device comprises:

• a transmitter;
• and
• a processor,
• wherein the transmitter sends a first message to the second device, wherein the first message comprises first key information such that the second device executes, after receiving the first message, a dynamic key exchange algorithm according to the first key information, to generate at least one encryption key,
• wherein the transmitter receives a second message returned by the second device to the first device, wherein the second message comprises second key information, and the processor executes a dynamic key exchange algorithm according to the second key information, to generate at least one encryption key,
• wherein the transmitter sends a third message to the second device, wherein the third message comprises a first hash value of the first device and a second hash value of the first device, wherein the first hash value of the first device is generated according to a first random number of the first device and a first part of a first mapping key, and the second hash value of the first device is generated according to a second random number of the first device and a second part of the first mapping key such that the second device determines, after receiving the third message, to return a fourth message to the first device, wherein the first mapping key is generated by the processor according to an initial key of the first device and a first predetermined algorithm,
• wherein the transmitter receives the fourth message sent by the second device, wherein the fourth message comprises a first hash value of the second device, a second hash valueof the second device, and a first encrypted random number of the second device, wherein the first hash value of the second device is generated according to the first random number of the second device and a first part of a second mapping key, the second hash value of the second device is generated according to a second random number of the second device and a second part of the second mapping key, the first encrypted random number of the second device is obtained by encrypting a first random number of the second device by using the encryption key, and the second mapping key is generated according to an initial key of the second device and the first predetermined algorithm such that the processor performs authentication on the first hash value of the second device according to the first random number of the second device and the first mapping key, wherein when the first hash value of the second device is correct, the control module determines to return a fifth message to the second device,
• wherein the transmitter sends the fifth message to the second device, wherein the fifth message comprises the first random number that is of the first device and is obtained after encryption by using the encryption key such that the second device performs authentication on the first hash value 1 of the first device according to the first random number of the first device and the second mapping key, and when the first hash value of the first device is correct, determines to return a sixth message to the first device,
• wherein the transmitter receives the sixth message, wherein the sixth message comprises the second random number that is of the second device and is obtained after encryption by using the encryption key such that the processor performs authentication on the second hash value of the second device according to the second random number of the second device and the first mapping key, wherein when the second hash value of the second device is correct, which indicates that the authentication performed by the first device on the second device succeeds, the processor determines to return a seventh message to the second device, and
• wherein the transmitter sends the seventh message to the second device, wherein the seventh message comprises the second random number that is of the first device and is obtained after encryption by using the encryption key such that the second device performs authentication on the second hash value of the first device according to the second random number of the first device and the second mapping key, wherein when the second hash value of the first device is correct, it indicates that the authentication performed by the second device on the first device succeeds.