US 2018/0323976 A1 · MULTI-TTP-BASED METHOD AND DEVICE FOR VERIFYING VALIDITY OF IDENTITY OF ENTITY

Abstract

Provided are an entity identity validity verification method and device with multiple trusted third parties being involved. In the application, validity of identities of entities performing mutual identity validity verification can only be verified by different trusted third parties. During the verification process, the trusted third parties that are respectively trusted by the two entities interact with each other, and provide services for mutual identity validity verification between the entities, to complete the identity validity verification between the entities.

An entity identity validity verification method with a plurality of TTPs being involved, wherein the method involves an entity A, an entity B, a trusted third party TTPA and a trusted third party TTPB, the TTPA is capable of verifying validity of an identity of the entity A, the TTPB is capable of verifying validity of an identity of the entity B, the entity A trusts the TTPA, the entity B trusts the TTPB, and wherein the method comprises:

step 1) transmitting, by the entity B, a message 1 to the entity A, wherein the message 1 comprises identity information IB of the entity B, and a random number RB generated by the entity B;
step 2) transmitting, by the entity A, a message 2 to the trusted third party TTPA after the entity A receives the message 1, wherein the message 2 comprises identity information IA of the entity A, a random number RA generated by the entity A, the identity information IB of the entity B, and the random number RB;
step 3) after the trusted third party TTPA receives the message 2 transmitted by the entity A, verifying, by the trusted third party TTPA, the identity of the entity A based on IA, and transmitting, by the trusted third party TTPA, a message 3 to the trusted third party TTPB, wherein the message 3 comprises a random number RTPA generated by the TTPA and a token TokenTPAB, wherein TokenTPAB comprises ResA, IB, RB, and a first signature of the TTPA, wherein ResA is a verification result of verifying the entity A by the TTPA, and signature objects of the first signature of the TTPA comprise ResA, IB and RB;
step 4) after the TTPB receives the message 3 transmitted by the TTPA, verifying, by the TTPB, the first signature of the TTPA in TokenTPAB;
after the first signature of the TTPA passes the verification performed by the TTPB, verifying, by the TTPB, the identity of the entity B based on IB, and transmitting, by the TTPB, a message 4 to the TTPA, wherein the message 4 comprises a token TokenTPBA, wherein TokenTPBA comprises ResB, a first signature of the TTPB, and a second signature of the TTPB, wherein ResB is a verification result of verifying the entity B by the TTPB, signature objects of the first signature of the TTPB comprise ResA and RB, and signature objects of the second signature of the TTPB comprise RTPA and ResB;
step 5) after the TTPA receives the message 4 transmitted by the TTPB, verifying, by the TTPA, the second signature of the TTPB in TokenTPBA;
after the second signature of the TTPB passes the verification performed by the TTPA, checking, by the TTPA, whether RTPA acquired from the message 4 is the same as the random number RTPA in the message 3 transmitted by the TTPA to the TTPB;
if RTPA acquired from the message 4 is the same as the random number RTPA in the message 3 transmitted by the TTPA to the TTPB, constructing a message 5 and transmitting the message 5 to the entity A by the TTPA, wherein the message 5 comprises a token TokenTA, wherein TokenTA comprises ResA, ResB, a second signature of the TTPA, and the first signature of the TTPB, wherein signature objects of the second signature of the TTPA comprise ResB and RA;
step 6) after the entity A receives the message 5 from the TTPA, verifying, by the entity A, the second signature of the TTPA in TokenTA;
after the second signature of the TTPA passes the verification performed by the entity A, checking, by the entity A, whether RA acquired from the message 5 is the same as the random number RA in the message 2 transmitted by the entity A to the TTPA;
if the RA acquired from the message 5 is the same as the random number RA in the message 2 transmitted by the entity A to the TTPA, determining, by the entity A, the validity of the identity of the entity B based on the verification result ResB, and constructing a message 6 and transmitting the message 6 to the entity B by the entity A, wherein the message 6 comprises the first signature of the TTPB;
and
step 7) after the entity B receives the message 6, verifying, by the entity B, the first signature of the TTPB;
after the first signature of the TTPB passes the verification performed by the entity B, checking, by the entity B, whether RB acquired from the message 6 is the same as the random number RB in the message 1 transmitted by the entity B to the entity A;
if the RB acquired from the message 6 is the same as the random number RB in the message 1 transmitted by the entity B to the entity A, determining, by the entity B, the validity of the identity of the entity A based on the verification result ResA.

12 more elements

Multi-ttp-based method and device for verifying validity of identity of entity

Life of this patent

Multi-ttp-based method and device for verifying validity of identity of entity

Life of this patent

Abstract

Claims21