TWI526871B - Server, user device, and user device and server interaction method - Google Patents

Description

Server, user equipment, and interaction method between user equipment and server

The present invention relates to network security, and more particularly to a server, a user equipment, and a method of interacting a user equipment with a server.

You can authenticate the website by installing anti-phishing client software or browser plug-in on the client. This method includes static authentication and dynamic authentication. Static authentication usually maintains a malicious website blacklist on the server side through user reporting, network scanning, etc. This method is widely used and low in implementation cost. However, due to the continual appearance of phishing websites, the coverage of blacklists is narrow and the update frequency is too slow. Resulting in a false negative rate for malicious websites. The dynamic authentication method establishes a website behavior analysis model based on the website function variable name, picture, page script, etc., and instantly authenticates the website authenticity when the user views the webpage, and the authentication efficiency is improved compared with the static traditional method, but Due to the continuous development of website forgery technology, the dynamic identification method still has false positives and false negatives, and because the dynamic authentication method is implemented by software, it is easily interfered and blocked by malicious programs such as Trojans, and the reliability is low.

Providing a server capable of transmitting website authentication information to a user equipment, the server storing at least one or more user equipment public keys and a server private key, the server being configured to perform a process of: receiving a user equipment signature via a website, User equipment signature element, and receiving website information from the website, determining whether the website is authenticated according to the website information, determining that the website is authenticated, determining a user equipment public key according to the user equipment signature element, and using the The user equipment public key verifies the user equipment signature, and when the verification is successful, encrypts the website authentication information by using a dynamic password, and uses the server private key to sign the encrypted website authentication information to obtain a server signature, and the server The device signature, the encrypted website authentication information as the server signature element, and the server information sent to the user equipment via the website enable the user equipment to obtain the server public key based on the server information to verify the server signature .

Providing a user equipment capable of receiving website authentication information from a server, the user equipment storing at least one or more server public keys, a user equipment private key, the user equipment being configured to perform a process of using the user equipment private key Generating a user equipment signature based on the user equipment signature element, and transmitting the user equipment signature, the user equipment signature element to the server via a website, and receiving the server signature from the server via a website as a servo Encrypted website authentication information, server information of the signature element, the server public key is used to verify the server signature based on the server information, and when the verification is successful, the dynamic password is used to decrypt the encrypted Website certification information.

Providing a method for interacting a user equipment with a server, the server storing at least one or more user equipment public keys and a server private key, the method comprising: the server receiving a user equipment signature and a user equipment signature element via a website, Receiving website information from the website, the server determining, according to the website information, whether the website is authenticated, and when determining that the website is authenticated, the server determines the user equipment public key according to the user equipment signature element, and Verifying the user equipment signature by using the user equipment public key. When the verification is successful, the server encrypts the website authentication information by using a dynamic password, and uses the server private key to sign the encrypted website authentication information to obtain a servo. And the server signature, the encrypted website authentication information as the server signature element, and the server information are sent to the user equipment via the website, so that the user equipment can obtain the server public key based on the server information. To verify the server signature.

Providing a method for interacting a user equipment with a server, where the user equipment stores at least one or more server public keys and user equipment private keys, The method includes: the user equipment generates a user equipment signature based on the user equipment signature element using the user equipment private key, and sends the user equipment signature, the user equipment signature element to the server via a website, the user equipment Receiving the server signature, the encrypted website authentication information as the server signature element, and the server information from the server, the user equipment obtaining the server public key to verify the server signature based on the server information, When the verification is successful, the user equipment uses the dynamic password to decode the encrypted website authentication information.

According to a scenario of the embodiment, the authenticity of the website is authenticated by a unified server, and the authentication result is authentic.

According to a scenario of the embodiment, a two-way authentication secure channel is established between the server and the user equipment, and the returned authentication result is displayed by the user equipment, and the authentication method is safe and reliable.

According to a scenario of the embodiment, the user can judge the legitimacy of the website while not affecting the online payment experience of the user equipment, and the authentication process is convenient and fast.

According to one or more embodiments, on the physical link, only the website can communicate with the background server, and the verification information can be decrypted by transparently passing through the security control item and the website to the user equipment.

According to one or more embodiments, the decryption and display by the security chip of the user device is highly reliable.

Various aspects of the present invention will become apparent to those skilled in the <RTIgt; It should be understood by those skilled in the art that these drawings are only used to illustrate the technical solutions of the present invention, and are not intended to limit the scope of the present invention.

1 is a schematic diagram of an interaction architecture of a user equipment and a server, according to an embodiment.

2 is a schematic diagram of interaction of a server with a user equipment, in accordance with one embodiment.

3 is a schematic diagram of interaction of a server with a user device, in accordance with one embodiment.

4 is a flow diagram of an authentication website in accordance with one embodiment.

Specific embodiments of the present invention will be further described in detail below with reference to the drawings. In the following description, numerous specific details are set forth However, it will be apparent to those skilled in the art that one or more aspects of the embodiments can be In addition, although specific features or aspects of the embodiment may be disclosed in relation to only one embodiment, it may be directed to any given or specific This feature or aspect may be combined with one or more features or aspects of other embodiments as desired and advantageous for the application. The following description is therefore not to be taken in a limiting

FIG. 1 is a schematic diagram of an interaction structure between a user equipment and a server. The interaction of the user device with the server takes place via a website. The user device's interaction with the server can be based on two-way authentication to establish a secure channel. The server public key certificate and the user equipment public and private key pair can be configured in the user equipment, and the user equipment public key certificate and the server public private key pair are configured in the server for mutual authentication.

In one example, the user equipment can be managed by the server, in which the server public key certificate, the user equipment public and private key pair are preset.

In one example, the user device can be a mobile communication device such as a cell phone, or a personal computer.

In one example, a security chip can be loaded in the user device, and a server public key certificate, a user device public-private key pair can be set in the security chip. The security chip can also be placed in a separate hardware device capable of communicating with the user device.

The interaction between the user device and the server can be performed on the basis of the server authenticating the website. In one example, the server issues a site certificate to a certified website and maintains a whitelist of authenticated websites.

The following is an illustrative example of a server authentication website: a website initiates a "site certificate" application request to a server, the application request containing website identity information; After receiving the request, the server verifies the identity information of the website to determine whether it is a legitimate website; if it is a legitimate website, the server issues a "site certificate", otherwise the application is rejected.

In one example, an authenticated website may add an identification on its page that supports the authenticity of the website.

In one example, the server can set a security control item on the website via which the user device interacts with the server.

2 is a schematic diagram of interaction of a server with a user equipment, in accordance with one embodiment. In Figure 2, the server stores at least one or more user equipment public keys and server private keys. The interaction between the server and the user equipment includes the server being configured to perform the following steps: receiving the user equipment signature, the user equipment signature element via the website, and receiving the website information from the website, determining whether the website is authenticated according to the website information, and determining the website. After authentication, the user equipment public key is determined according to the user equipment signature element, and the user equipment public key is used to verify the user equipment signature. When the verification is successful, the dynamic password is used to encrypt the website authentication information, and the server private key is used to encrypt the website. The authentication information signature is signed by the server, and the server signature, the encrypted website authentication information as the server signature element, and the server information are sent to the user equipment via the website, so that the user equipment can obtain the server public key based on the server information. Verify the server signature.

In one example, the user device signature element is based on the user The device serial number, the user signature timestamp, and the server is configured to determine the user equipment public key based on the user equipment serial number.

In one example, the website information includes a site certificate for the server to determine whether the website is authenticated, and the server is configured to determine whether the site certificate was issued by it.

The user equipment seed key may be separately set in the user equipment and the server for encrypting and decrypting the website authentication information. Thus, in one example, the server also stores one or more user equipment seed keys, and the server is configured to generate a dynamic password based on the user equipment seed key.

In one example, the server is configured to receive an authentication request from one or more websites and send a site certificate to the one or more websites after the authentication is passed, the server being configured to determine from the website by Whether the site certificate is authentic to determine whether the site is suitable for user device access.

In one example, the server is configured to refuse to communicate with the website when it is determined that the website is not authenticated.

In one example, the server is configured to alert the website of the verification result when the verification fails.

3 is a schematic diagram of interaction of a server with a user device, in accordance with one embodiment. In FIG. 3, the user equipment stores at least one or more server public keys, user equipment private keys, and the interaction of the server with the user equipment includes the user equipment being configured to perform the following process: using the user equipment private key based on the user equipment signature elements Generate a user device signature, and sign the user device, user device signature elements via the website Send to the server, receive the server signature from the server via the website, the encrypted website authentication information as the server signature element, the server information, and obtain the server public key based on the server information to verify the server signature, when the verification succeeds The dynamic password is used to decode the encrypted website authentication information.

In one example, the user equipment signature element is based on the user equipment serial number, the user signature timestamp, and the user equipment is configured to determine the server public key based on the server information.

In one example, the user equipment also stores a user equipment seed key, the user equipment being configured to generate a dynamic password based on the user equipment seed key.

In one example, the decrypted website authentication information is displayed on the user device. Website authentication information can be used to remind users of the authenticity of the website.

4 is a flow diagram of an authentication website in accordance with one embodiment.

In 1, the user equipment signs the device SN number, time and other information with the "device private key", and sends the digital signature and the elements participating in the signature to the website through the security control item; in 2, the website according to the agreement The format requires that the website authenticity authentication request message be organized and sent to the server. The message shall include at least the device signature information, the elements participating in the signature, and the “site certificate”; in 3, after receiving the request message, the server completes the message parsing and judges Whether the "site certificate" sent by the disconnection is valid; in 4, if it is a valid "site certificate", the server obtains the corresponding "device public key" through the device SN number index, and judges the device signature information sent. Whether it is valid; otherwise, it enters the exception handling A; in 5, if it is a valid device signature information, the server organizes and returns the website authenticity authentication response message: (1) The corresponding device seed density is obtained through the SN index. "key", calculate the current dynamic password, and use the dynamic password to encrypt the website authentication information to form a "website authenticity certificate"; (2) use the "server private key" to sign the "website authenticity certificate"; 3) The message is composed and transmitted back to the user equipment through the website and the security control item. The response message should at least contain the server signature information, the elements participating in the signature and the server information; otherwise, the exception processing B is entered; in 6, the user After receiving the response message, the device completes the message parsing, and judges whether the server signature information is valid through the preset "server public key"; in 7, if it is a valid server signature information, The preset "device seed key" calculates the current dynamic password, decrypts the "website authenticity certificate", and displays the website authentication information on the user equipment; otherwise, it enters the exception processing C.

The exception handling can be, for example: A-rejecting a website request; B-Reply to the website "non-legal user equipment"; C- display "non-legal website authenticity certificate" on the user equipment.

The above embodiment is based on an asymmetric cryptosystem and a dynamic password technique to effectively authenticate a website by designing a secure channel. It has the following advantages: "Website authenticity certificate" has high credibility and anti-counterfeiting. "Website authenticity certificate" is generated by the server, and the server and the user equipment are authenticated in both directions, and each other can be identified as forged. User device or background server. "Website authenticity certificate" is anti-tampering and anti-replay attack. "Website authenticity certificate" is formed by dynamic password encryption, which can prevent an attacker from tampering with an open Internet environment or intercepting a replay attack. The display of the identification result is intuitive and reliable, and the user equipment gives the identification result an intuitive display, which can effectively prompt the user to access the information of the website, and the decryption and display of the “authentication document of the website” can be completed in the security chip, Will be hijacked or tampered with by malicious software such as Trojans. The user's use threshold is low, and the authentication process of the entire website is completed by the user equipment, the security control item and the server.

Claims (14)

A server capable of transmitting website authentication information to a user equipment, wherein the server stores at least one or more user equipment public keys and a server private key, the server being configured to perform a process of receiving a user via a website Device signature, user equipment signature element, and receiving website information from the website, determining whether the website is authenticated according to the website information, and determining that the website is authenticated, determining the user equipment public key according to the user equipment signature element, and Using the user equipment public key to verify the user equipment signature, when the verification is successful, encrypting the website authentication information by using a dynamic password, and using the server private key to sign the encrypted website authentication information to obtain a server signature, and Transmitting the server signature, the encrypted website authentication information as the server signature element, and the server information to the user equipment via the website, so that the user equipment can obtain the server public key based on the server information to verify the Server signature. The server of claim 1, wherein the user equipment signature element is based on a user equipment serial number, a user signature time stamp, and the server is configured to determine a user equipment public according to the user equipment serial number. key. The server described in claim 1, wherein The website information includes a site certificate for causing the server to determine whether the website is authenticated, the server being configured to determine whether the site certificate is issued by it. The server of claim 1, wherein the server further stores the one or more user equipment seed keys, the server being configured to generate a location based on the user equipment seed key Dynamic password. A user equipment capable of receiving website authentication information from a server, wherein the user equipment stores at least one or more server public keys and a user equipment private key, the user equipment being configured to perform the process of using the user The device private key generates a user equipment signature based on the user equipment signature element, and sends the user equipment signature, the user equipment signature element to the server via a website, and receives the server signature from the server via a website as a server. Encrypted website authentication information, server information of the signature element, the server public key is used to verify the server signature based on the server information, and when the verification is successful, the dynamic password is used to decode the encrypted Website certification information. The user equipment of claim 5, wherein the user equipment signature element is based on a user equipment serial number, a user sign A timestamp, the user equipment being configured to determine a server public key based on the server information. The user equipment of claim 5, wherein the user equipment further stores a user equipment seed key, the user equipment being configured to generate the dynamic password based on the user equipment seed key. A method for interacting a user equipment with a server, wherein the server stores at least one or more user equipment public keys and a server private key, the method comprising: the server receiving a user equipment signature and a user equipment via a website Signing the element and receiving the website information from the website, the server determining whether the website is authenticated according to the website information, and when determining that the website is authenticated, the server determines the user equipment according to the user equipment signature element Key, and verifying the user equipment signature by using the user equipment public key, when the verification is successful, the server encrypts the website authentication information by using a dynamic password, and uses the server private key to authenticate the encrypted website information. The signature is obtained by the server, and the server signature, the encrypted website authentication information as the server signature element, and the server information are sent to the user equipment via the website, so that the user equipment can obtain the servo based on the server information. The public key to verify the server signature. The method of claim 8, wherein the user equipment signature element is based on a user equipment serial number and a user signature timestamp, the method comprising: the server determining, according to the user equipment serial number, a user equipment public key. The method of claim 8, wherein the website information includes a site certificate for causing the server to determine whether the website is authenticated, the method comprising: the server determining whether the site certificate is It is issued. The method of claim 8, wherein the server further stores the one or more user equipment seed keys, the method comprising: the server generating a location based on the user equipment seed key Dynamic password. A method for interacting a user equipment with a server, wherein the user equipment stores at least one or more server public keys and a user equipment private key, the method comprising: the user equipment using the user equipment private key based on the user equipment The signature element generates a user device signature, and the user device is signed, and the user is set. The backup signature element is sent to the server via a website, and the user equipment receives the server signature, the encrypted website authentication information, and the server information as a server signature element from the server via a website, and the user equipment is based on the The server information is obtained by the server public key to verify the server signature. When the verification is successful, the user equipment uses the dynamic password to decode the encrypted website authentication information. The method of claim 12, wherein the user equipment signature element is based on a user equipment serial number and a user signature timestamp, the method comprising: the user equipment determining a server public key according to the server information . The method of claim 12, wherein the user equipment further stores a user equipment seed key, the method comprising: the user equipment generating the dynamic password based on the user equipment seed key.