CN101277297B - Conversation control system and method - Google Patents

Abstract

The invention provides a session control system and method. The system mainly includes: a service provider device and an authentication server. The method mainly includes: an authentication server is set in the network, and after receiving the session establishment request sent by the user equipment, the service provider device sends the authentication request of the user equipment to the authentication server; The user equipment performs authentication, and returns an authentication response to the service provider equipment. By using the invention, the authentication function of the equipment is concentrated on a special authentication server, which can reduce the complexity of the service provider equipment and improve the efficiency of the service provider equipment. And the authentication information of all devices in the network can be managed uniformly through the authentication server. The session key used to ensure the security of the session service is not transmitted in the network, which reduces the security threats faced by the user equipment and the service provider equipment.

Description

Session control system and method

technical field

The invention relates to the field of network communication, in particular to a session control system and method. the

Background technique

The structural diagram of the general model of the home network proposed in ITU (International Telecommunication Union, International Telecommunication Union) is shown in Figure 1. According to the location and role of each entity, the home network model shown in Figure 1 can be divided into seven types, namely: remote user, remote terminal, application server, secure home gateway, home application server, home User and Home Devices. Among them, household devices are divided into the following three types of devices: A, B, and C according to different functions. the

Class A equipment: with control functions; for example: computers, set-top boxes

Class B equipment: with bridging function; for example: switch (switch), hub (hub)

Class C equipment: Provides specific services for other household equipment; for example: digital TV, refrigerator. The Class C device does not have a communication interface to directly connect to the home network, but connects to the home network through the Class B device. the

The schematic diagram of IGRS (Intelligent Interconnection, Resource Sharing and Collaborative Services) architecture is shown in Figure 2. IGRS supports various devices to be connected through wired LAN, wireless LAN, Bluetooth and other networks. The IGRS transmission and network protocol is based on the TCP/IP protocol family. The device interaction message framework is based on HTTP/1.1. The device discovery and resource sharing platform is based on the IGRS basic protocol. The collaborative service platform is based on the IGRS application framework.

A schematic diagram of the processing flow of the IGRS device interaction mode is shown in FIG. 3 . This model describes the entire process of an IGRS device from joining the network, discovering other IGRS devices, joining a certain IGRS device group, discovering services on other IGRS devices in the device group and making service calls, and finally exiting the network. Including 14 steps: device online, device (group) discovery, pipeline creation, device group creation and joining, service discovery, session creation, service use, session end, device/service online and offline event contract, device/service online and offline event Notification, device/service online and offline event cancellation, pipeline disconnection, device group exit and dissolution, device offline. the

The three-way authentication technology based on public key technology is a relatively reliable identity authentication technology, which confirms the information sent by the device at every step. The processing flow of the three-way authentication technology is shown in Figure 4, including the following steps:

Step 41: Device A generates a non-repetitive random number rA through a random number generator. the

Step 42: Device A sends an authentication request to device B: A{tA, rA, snA}. the

Among them, tA represents the time stamp, which generally consists of two dates: the generation time and the expiration time of the message, and the time stamp is used to prevent the delay of information transmission and anti-replay attack; snA represents the serial number of device A; A{} represents Use A's private key to encrypt the information in {}. the

Step 43: After receiving the authentication request from device A, device B checks the integrity of the message according to the public key of device A. Extract tA, rA and snA from the authentication request, and verify the validity of tA. Then, device B generates a non-repeating random number rB. the

Step 44: Device B sends an authentication request response to device A: B{tB, rB, rA, snB}. the

Step 45: After receiving the authentication request response from device B, device A checks the integrity of the message according to device B's public key. And extract tB, rB, rA and snB from the authentication request response message, and then verify the validity of tB, and check whether the received rA is consistent with the above-mentioned sent rA. the

Step 46: After the verification of whether the received rA is consistent with the sent rA is passed, the device A sends a response message to the device B: A{tA, rB}.

Step 47: After receiving the response message from device A, device B extracts tA and rB from it. After verifying the validity of tA, check whether the received rB is consistent with the above-mentioned sent rB. After the verification is passed, the authentication process of the three-way authentication ends. the

The specific processing flow of a home network session control scheme based on a trusted third party in the prior art is shown in Figure 5, including the following steps:

Step 51: The client C sends a session establishment request to the target service provider device S. The session establishment request contains the user's unique identifier, security level information, and is generated according to the corresponding access control description, authentication mechanism, and encryption algorithm in the target service description. Token;

Step 52. After receiving the above-mentioned session establishment request, S verifies the unique user identifier, security level information, user rights and other information sent by C, and executes step 53 after the verification is passed;

Step 53, S checks whether the pipeline security mechanism between C and S satisfies the access security mechanism for S to provide session services, if yes, then directly executes step 513; otherwise, executes step 54;

Step 54, S returns to C a response message carrying the information that the pipeline security mechanism does not meet the session security requirements;

Step 55. After receiving the above response message, C selects a corresponding service security mechanism descriptor based on a trusted third party that suits him from the list of encryption algorithms supported by S's service description, and prepares to send the service security mechanism descriptor to the trusted third party in the device group. The device applies for a session encryption key;

Step 56, C sends a session encryption key request message to the master device, requesting to be encrypted by the pre-shared key between C and the master device, and the request message includes C's identity identifier, S's identity identifier, encryption algorithm and other information;

Step 57. After receiving the above request message sent by C, the master device verifies C's identity and generates a session encryption key;

Step 58: The master device uses the pre-shared key to encrypt the generated session encryption key, the identifier of C and the corresponding encryption algorithm to form the ciphertext Cipher1, and also uses the pre-shared key between the master device and S to encrypt The algorithm encrypts information such as the identifier of S, the identifier of C, the service security mechanism descriptor based on the trusted third party supported by C and S, and the session encryption key to form the ciphertext Cipher2. Then, the master device sends the above-mentioned ciphertext Cipher1 and ciphertext Cipher2 to C through the session encryption key request response;

Step 59: After receiving the above session encryption key request response sent by the master device, C extracts Cipher1 and Cipher2, and decrypts Cipher1 with the pre-shared key with the master device to obtain the session encryption key. Because C does not have the pre-shared key between S and the master device, C cannot decrypt and modify Cipher2;

Step 510, C sends Cipher2 and C's related information encrypted with the session encryption key to S;

Step 511, S decrypts the received Cipher2, obtains the relevant information of C and the session encryption key, and then verifies the relevant information sent by C;

Step 512, after the verification is successful, S sends confirmation information to C. So far, the communication between C and S is encrypted and decrypted with the session encryption key;

Step 513, C and S start a conversation. the

In the process of realizing the present invention, the inventor found that the disadvantages of the above-mentioned home network session control scheme in the prior art are: the service provider device is required to verify the client, which increases the structural complexity of the service provider device and reduces the The efficiency of the service provider equipment. At the same time, since there are many server devices, each server device needs to provide an authentication function, which increases the complexity and design cost of the entire system. the

In addition, in this technical solution, the encryption key used in the session is transmitted through the network, which increases potential security risks. the

Contents of the invention

The purpose of the embodiments of the present invention is to provide a system and method for session control, so as to solve the problem of complex structure and low efficiency of the service provider device.

The purpose of the embodiments of the present invention is achieved through the following technical solutions:

A session control system comprising:

The service provider device, including the service provider module, is used to communicate with the authenticated user device and provide corresponding services;

The service provider device also includes: an authentication request processing module, configured to send an authentication request for authenticating the user equipment according to the session establishment request after receiving the session establishment request sent by the user equipment;

The system also includes an authentication server, configured to authenticate the user equipment after receiving the authentication request sent by the authentication request processing module for authenticating the user equipment;

The authentication server includes:

Equipment authentication information management module: used to save and maintain the authentication information of user equipment in the network;

Device authentication processing module: used to authenticate the user equipment according to the authentication information stored in the equipment authentication information management module after receiving the authentication request for authenticating the user equipment;

The device authentication processing module includes:

Device identity authentication module: after receiving the authentication request for authenticating the user equipment, according to the unique identifier of the user equipment carried in the authentication request and the device identity in the authentication information stored by the device authentication information management module and the corresponding validity period information, to authenticate the user equipment;

The device authority authentication module: after receiving the authentication request for authenticating the user equipment, according to the user equipment authority information carried in the authentication request and the equipment authority in the authentication information stored by the equipment authentication information management module information, to verify whether the user device has the right to use the corresponding service;

The device security level authentication module: after receiving the authentication request for authenticating the user equipment, according to the current pipeline security level information between the user equipment and the service provider device carried in the authentication request and the device authentication The security level information required by the corresponding service in the authentication information stored by the information management module verifies whether the security level requirement of the pipeline between the user equipment and the service provider device meets the security level requirement of the corresponding service. the

A session control method, the session network is provided with an authentication server independent of the service provider device, the method specifically includes the steps:

A. After receiving the session establishment request sent by the user equipment, the service provider device sends an authentication request to the authentication server to authenticate the user equipment;

B. The authentication server authenticates the user equipment according to the stored authentication information, and returns an authentication response to the service provider equipment;

C. The service provider device establishes a session with the user equipment after the user equipment passes the authentication;

Described step B specifically comprises:

B1. The authentication server authenticates the user equipment according to the device identity in the stored authentication information, the corresponding validity period information, and the unique identifier of the user equipment carried in the authentication request. After the authentication is passed, execute Step B2;

B2. The authentication server verifies whether the user equipment has the authority to use the corresponding service according to the equipment authority information in the stored authentication information and the user equipment authority information carried in the authentication request;

B3. After the authentication server passes the verification of the authority of the user equipment, according to the security level information required by the corresponding service in the stored authentication information and the current pipeline security level between the user equipment and the service provider equipment carried in the authentication request Information, verify whether the security level requirements of the pipeline between the user equipment and the service provider equipment meet the security level requirements of the corresponding service, and return the verification result to the user equipment. the

It can be seen from the technical solutions provided by the above-mentioned embodiments of the present invention that the embodiments of the present invention use the authentication server to perform unified authentication on the devices of both parties in the network in the conversation, thereby reducing the complexity of the service provider device and improving the service provider device. s efficiency. In addition, the authentication information of devices in all device groups in the network can be uniformly managed through the authentication server. the

Description of drawings

Fig. 1 is the structural representation of the general model of the family network that proposes in ITU in the prior art;

Fig. 2 is the schematic diagram of IGRS architecture in the prior art;

Fig. 3 is a schematic diagram of the processing flow of the IGRS equipment interaction mode in the prior art;

Fig. 4 is the processing flowchart of three-way authentication technology in the prior art;

Fig. 5 is a specific processing flowchart of a home network session control scheme based on a trusted third party in the prior art;

6 is a schematic structural diagram of a system for authenticating a session device according to an embodiment of the present invention;

Fig. 7 is the processing flowchart of the method for authenticating the session device according to the embodiment of the present invention;

Fig. 8 is the processing flow chart of generating session key by three-way authentication technology using public key described in the embodiment of the present invention;

Fig. 9 is the processing flowchart of the client dismantling session described in the embodiment of the present invention;

Fig. 10 is a flow chart of the process of tearing down a session by the service provider device according to the embodiment of the present invention. the

Detailed ways

Embodiments of the present invention provide a session control system and method. the

The embodiment of the present invention is based on the above-mentioned IGRS architecture. In this IGRS architecture, the IGRS service call is performed on the pipeline, and the appropriate security mechanism has been established according to the security requirements when the pipeline is created. Therefore, the security requirements of the IGRS service call mainly consider the identity authentication when accessing the service , and the confidentiality, integrity and authentication of the message of the session are guaranteed by the security mechanism of the pipeline (transmission encryption) as much as possible. The security requirements of session message confidentiality, integrity and authentication are only considered when a secure channel cannot be directly created between devices. At this time, communication between the client and the service provider needs to be generated during the session creation process. session encryption key. the

The system and method for session control described in the embodiments of the present invention are applicable to various small local area networks, such as home networks. Taking a home network as an example, both the client and the service provider are devices used by family members and are connected through the home network. The following uses a home network as an example to describe the system and method for session control in the embodiments of the present invention. the

The structural diagram of the session control system according to the embodiment of the present invention is shown in FIG. 6 , including: a service provider device and an authentication server. the

The service provider device: after receiving the session establishment request sent by the user equipment, send the authentication request of the user equipment to the authentication server. Conversation with authenticated user equipment. Including: authentication request processing module, session key generation module and service provision module. the

Among them, the authentication request processing module: after receiving the session establishment request sent by the user equipment, send to the authentication server an authentication request carrying the unique identifier, authority information and security level information of the user equipment. the

Among them, the session key generation module: after receiving the information returned by the authentication server that the pipeline security mechanism does not meet the session security requirements, generate and exchange session key parameters with the user equipment based on the three-way authentication technology based on the public key ; The service provider and the user equipment respectively generate a session key according to the session key parameter. the

Wherein, the service providing module is configured to conduct a session with the authenticated user equipment and provide corresponding services. the

Authentication server: after receiving the authentication request sent by the service provider device, authenticate the user device according to the saved authentication information, and return an authentication response to the service provider device. the

The authentication server in the embodiment of the present invention is a type A device with a control function in a home network, such as a home gateway or a home application server. The authentication server stores authentication information such as identities and device permissions of all devices in the home network, and performs unified authentication management on all devices in the entire home network. the

The authentication server in the embodiment of the present invention includes: a device authentication information management module and a device authentication processing module. the

Device authentication information storage module: used to save and maintain the authentication information of all devices in the entire home network, the authentication information includes: device identity, authority, security level and other information. the

Device authentication processing module: After receiving the user device authentication request forwarded by the service provider device, it is used to authenticate the identity, authority and security level of the user device according to the stored authentication information, and return the authentication result to the service provider device. Authentication response. Including: a device identity authentication module, a device authority authentication module and a device security level authentication module. the

Among them, the device identity authentication module: after receiving the user device authentication request forwarded by the service provider device, according to the unique identifier of the user device carried in the authentication request and the device identity in the stored authentication information and the corresponding validity period information, for The corresponding user equipment performs identity authentication. the

Among them, the device authority authentication module: used to verify the user equipment according to the user equipment authority information carried in the authentication request and the equipment authority information in the stored authentication information after receiving the user equipment authentication request forwarded by the service provider device Whether there is permission to use the corresponding service. the

Among them, the device security level authentication module: after receiving the user device authentication request forwarded by the service provider device, according to the current pipeline security level information and the saved authentication information between the user device and the service provider carried in the authentication request According to the security level information required by the corresponding service, verify whether the security level requirements of the pipeline between the user equipment and the service provider equipment meet the security level requirements of the corresponding service. The above-mentioned authentication server only needs to perform simple verification on the service provider device, such as verifying the identity of the service provider device, and checking whether the service provider device is capable of providing corresponding services. the

The processing flow of the method for session control described in the embodiment of the present invention is shown in Figure 7, including the following steps:

Step 71: The client user device C sends a session establishment request to the target service provider device S through the channel established during device initialization, and the session establishment request includes C's unique identifier, authority information and security level information. the

Step 72. After receiving the session establishment request sent by the above-mentioned C, S sends an authentication request to the authentication server, and the authentication request carries the unique identifier, authority information and security level information of the above-mentioned C;

Step 73: After receiving the authentication request sent by S, the authentication server performs identity verification on the corresponding user equipment according to the unique identifier of the user equipment carried in the authentication request, the device identity in the stored authentication information, and the corresponding validity period information. the

After the above authentication is passed, verify whether the user equipment has the authority to use the corresponding service according to the user equipment authority information carried in the authentication request and the equipment authority information in the stored authentication information. the

After the above permission verification is passed, verify the user equipment and the service provider according to the security level information of the current pipeline between the user equipment and the service provider carried in the authentication request and the security level information required by the corresponding service in the stored authentication information Whether the safety level requirements of pipelines between equipment meet the safety level requirements of corresponding services. the

The authentication server returns to the service provider device an authentication failure response carrying information that the authentication of the user equipment fails after the above identity authentication and authority authentication fail. the

Step 74: After the authentication server verifies that the security level requirements of the pipe between the user equipment and the service provider device do not meet the security level requirements of the corresponding service, return to the service provider device that the security mechanism of the carrying pipe does not meet the session security requirements Authentication failure response for information. the

After the authentication server verifies that the security level of the pipeline between the user equipment and the service provider device meets the security level requirements of the corresponding service, it returns to the service provider device an authentication success response carrying the information that the pipeline security mechanism meets the session security requirements . the

Step 75: The target service provider device S conducts a session with the authenticated user equipment, and provides corresponding services. the

The above-mentioned authentication server in the embodiment of the present invention can be applied in the process of generating a session key between C and S using public key technology. The process flow of generating a session key using public key technology in the embodiment of the present invention is shown in FIG. 8 , including the following steps:

Step 81: The client user device C sends a session establishment request to the target service provider device S through the channel established during device initialization, and the session establishment request includes C's unique identifier, security level information, and the corresponding access according to the target service description. Token generated by control description, authentication mechanism and encryption algorithm. the

In a home network, except for the UDP-based multicast search and unicast response interaction process between devices without establishing a connection relationship between devices in advance, all other interactions between devices are based on pipes. The pipeline mechanism encapsulates and simplifies the creation and management of TCP connections during device interaction. the

Step 82. After receiving the session establishment request sent by the above-mentioned C, S sends an authentication request to the authentication server, and the authentication request carries the unique identifier, security level information and user authority information of the above-mentioned C;

Step 83: After the authentication server receives the authentication request sent by the above-mentioned S, it checks the validity of the unique identifier of C carried in the above-mentioned authentication request, the legality of the security level information and the user authority information;

Step 84: After the authentication server successfully verifies the above-mentioned user unique identifier, security level information and user authority information, it returns an authentication success message to S;

Step 85, S saves C's identity information, validity period, and authority locally, that is, S stores the above-mentioned user unique identifier, security level information, and user authority information of C locally;

Step 86, S checks whether the pipeline security mechanism between C and S satisfies the access security mechanism for S to provide session services, if yes, then execute step 812; otherwise, execute step 87;

Step 87, S returns to C a response message carrying the information that the pipeline security mechanism does not meet the session security requirements;

Step 88: After C receives the response message returned by S, C and S exchange session key parameter information: rC, rS, snC, snS according to the public key three-way authentication mechanism. the

Step 89, S generates the session key Kcs between C and S according to the above parameters rC, rS, snC and snS;

Step 810, S sends a session request success response to C;

Step 811, C also generates the session key Kcs between C and S according to the above parameters rC, rS, snC and snS. So far, the communication between C and S is encrypted and decrypted with Kcs;

Step 812, C and S start to use the above Kcs to conduct a session. the

In the above session key generation process, if one of the two parties (C and S) in the session is not capable enough to generate a session key by itself, the authentication server will replace the device with insufficient capacity to generate a session key with the other party. key. Then the authentication server encrypts the session key with the public key of the above-mentioned device with insufficient capability, and then sends it to the device with insufficient capability. After the device with insufficient capability decrypts the session key with its private key, it passes the session key key to conduct a conversation with the other party. the

In the above session key generation process, if both parties (C and S) of the session are not capable enough, the authentication server will generate a session key according to the serial numbers of both parties, and encrypt and send them to both parties with their public keys . The two parties in the conversation obtain the session key after decrypting with their respective private keys, and use the session key to carry out the session process. the

After the session key is established and the session process is started through the above processing flow, there are three situations for dismantling the session: the client dismantles the session, the service provider dismantles the session, and the session is terminated abnormally. the

The three situations of tearing down the session are introduced respectively below. the

1. The client disconnects the session. the

The processing flow of the dismantling session is shown in Figure 9, including the following steps:

Step 91, the client C sends a session teardown request to the service provider device S;

Step 92. After receiving the above-mentioned session teardown request sent by the client C, the service provider S deletes the saved session-related information;

Step 93, the service provider S sends a response message allowing session teardown to the client C;

In step 94, after receiving the message of allowing the session teardown, the client C deletes the session related information, and the session teardown succeeds. the

2. The service provider S disconnects the session. the

The processing flow of the dismantling session is shown in Figure 10, including the following steps:

Step 101, the service provider device S sends a session teardown request to the client C;

Step 102. After receiving the session teardown request sent by the above-mentioned service provider S, the client C deletes the saved session-related information;

Step 103, the client C sends a response message allowing session teardown to the service provider S;

Step 104: After receiving the above-mentioned message allowing the session teardown, the service provider S deletes the session-related information, and the session teardown succeeds. the

Case 3: The session is aborted abnormally. the

After the session is created, the session maintenance request will be sent periodically. If the maintenance request sent by one party cannot get a response from the other party within the specified response time due to equipment power failure, network disconnection, etc., the other party in the session will be considered offline. , the conversation between the two parties is directly disconnected. the

To sum up, the embodiment of the present invention uses a single authentication server to perform unified authentication and management on devices in the network, which can reduce the complexity of devices in the network, improve the efficiency of devices, and reduce the cost of network construction. When the security of the pipeline between the devices of both parties in the session cannot meet the security requirements of the session, the confidentiality, integrity and authentication of the session message transmission are guaranteed through the generated session key. The service between devices in the home network can be reliably realized, the session key is not transmitted in the network, the security risk of the session is reduced, and the security of the entire home network is improved. the

The embodiment of the present invention adopts the three-way authentication technology based on the public key to generate the session key, which is generated by both parties in the session according to relevant parameter information, and the session key is not transmitted in the network. Therefore, when the security of the pipeline between the devices of the two parties in the session cannot meet the security requirements of the session, the confidentiality, integrity and authentication of the session message transmission can be guaranteed through the generated session key. The service between devices in the home network can be reliably realized, the session key is not transmitted in the network, the security risk of the session is reduced, and the security of the entire home network is improved. the

The above is only a preferred embodiment of the present invention, but the scope of protection of the present invention is not limited thereto. Any person skilled in the art within the technical scope disclosed in the present invention can easily think of changes or Replacement should be covered within the protection scope of the present invention. Therefore, the protection scope of the present invention should be determined by the protection scope of the claims. the

Claims (7)

1. conversation control system comprises:

Service providing end equipment comprises service providing module, and the subscriber equipment that is used for passing through with authentication carries out session, and corresponding service is provided;

It is characterized in that described service providing end equipment also comprises: the authentication request processing module is used for setting up the authentication request that the request transmission authenticates described subscriber equipment according to described session after request is set up in the session that receives the subscriber equipment transmission;

Described system also comprises certificate server, is used for after the authentication request that described subscriber equipment is authenticated that receives described authentication request processing module transmission described subscriber equipment being authenticated;

Described certificate server comprises:

Device authentication information management module: be used for preserving authentication information with the maintaining network subscriber equipment;

Device authentication process module: be used for after receiving the authentication request that described subscriber equipment is authenticated, described subscriber equipment being authenticated according to the authentication information of preserving in the device authentication information management module;

Described device authentication process module comprises:

Equipment identities authentication module: be used for after receiving the authentication request that described subscriber equipment is authenticated, according to equipment identities in the authentication information of unique user equipment identifier of carrying in the described authentication request and the preservation of described device authentication information management module and corresponding term of validity information, described subscriber equipment is carried out authentication;

Equipment purview certification module: be used for after receiving the authentication request that described subscriber equipment is authenticated, according to the equipment authority information in the authentication information of subscriber equipment authority information that carries in the described authentication request and the preservation of described device authentication information management module, verify whether described subscriber equipment has the authority of using respective service;

Device security grade authentication module: be used for after receiving the authentication request that described subscriber equipment is authenticated, according to the required safety level information of respective service in the authentication information of current pipe safety class information between subscriber equipment that carries in the described authentication request and the service providing end equipment and the preservation of described device authentication information management module, verify that the safe class of pipeline between described subscriber equipment and the service providing end equipment requires whether to satisfy the safe class requirement of respective service.

2. system according to claim 1 is characterized in that, described service providing end equipment also comprises:

Session secret key generating module: be used for receiving after pipe safety mechanism that described device security grade authentication module returns do not satisfy the secure session demand information, and the three-dimensional authentication techniques based on PKI produce and the exchange session key parameter between the described subscriber equipment; Described service providing end equipment and described subscriber equipment generate session key according to described session key parameter respectively.

3. system according to claim 1 and 2 is characterized in that, described system is applicable to the home network based on intelligence interconnection, resource-sharing and cooperation with service IGRS architecture.

4. a conversation controlling method is characterized in that, can be provided with the certificate server that is independent of service providing end equipment in the telephone network, and described method specifically comprises step:

A, service providing end equipment send the authentication request that described subscriber equipment is authenticated to described certificate server after request is set up in the session that receives the subscriber equipment transmission;

B, described certificate server authenticate described subscriber equipment according to the authentication information of preserving, to described service providing end equipment return authentication response;

C, described service providing end equipment are set up session with described subscriber equipment after described subscriber equipment is by authentication;

Described step B specifically comprises:

B1, described certificate server are according to the unique user equipment identifier of carrying in the equipment identities in the authentication information of preserving and corresponding term of validity information and the described authentication request, described subscriber equipment is carried out authentication, after this authentication is passed through, execution in step B2;

B2, described certificate server verify according to the subscriber equipment authority information that carries in equipment authority information in the authentication information of preserving and the authentication request whether described subscriber equipment has the authority of using respective service;

After B3, described certificate server pass through the Authority Verification of described subscriber equipment, according to current pipe safety class information between subscriber equipment that carries in required safety level information of respective service in the authentication information of preserving and the authentication request and the service providing end equipment, verify that the safe class of described subscriber equipment and service providing end pipes between devices requires whether to satisfy the safe class requirement of respective service, and return the checking result to described subscriber equipment.

5. method according to claim 4 is characterized in that, unique identification, authority information and the safety level information that comprises described subscriber equipment in the request set up in described session.

6. method according to claim 4 is characterized in that, if the safe class of described subscriber equipment and service providing end pipes between devices requires to satisfy the safe class requirement of respective service, then described step C is specially:

C1, described service providing end equipment and described subscriber equipment utilize the pipe safety mechanism between them to carry out session;

If the safe class of described subscriber equipment and service providing end pipes between devices requires not satisfy the safe class requirement of respective service, then described step C is specially:

Three-dimensional authentication techniques based on PKI between C2, described service providing end equipment and the described subscriber equipment produce and the exchange session key parameter; Described service providing end equipment and described subscriber equipment generate session key according to described session key parameter respectively, utilize described session key to carry out session.

7. method according to claim 4 is characterized in that described method also comprises;

Described certificate server to the authentication of described subscriber equipment obstructed after, return to described service providing end equipment and to carry the not authentication failure response by information of subscriber equipment authentication;

Described certificate server to the Authority Verification of described subscriber equipment obstructed after, return to described service providing end equipment and to carry the not authentication failure response by information of subscriber equipment authentication.

Images