Method and system for communication between server and authenticator

Abstract

A method for communication between a server and an authenticator. The method comprises: a server generating a first client identifier, a first authenticator identifier and a first session key according to a request sent by a client, and broadcasting, by means of the client, data comprising the first client identifier; an authenticator scanning the broadcast data, acquiring a third key to verify the first client identifier, if verification is successful, generating a second authenticator identifier and a second session key, making a notification of the successful verification, stopping scanning, and broadcasting broadcast data comprising the second authenticator identifier; the client stopping broadcasting, and scanning the broadcast data sent by the authenticator, acquiring and verifying the second authenticator identifier in the broadcast data, and if verification is successful, establishing a Bluetooth connection with the authenticator; and the client performing handshake and encrypted communication operation with the authenticator. By means of the present invention, data not being stolen during a transmission process can be ensured, thereby improving the data security during the transmission process, and ensuring the interests of a user.