Identity authentication method, authentication access controller, request device, storage medium, program, and program product

Abstract

Disclosed is an identity authentication method. When a request device and an authentication access controller perform identity verification on the basis of an authentication mechanism of a pre-shared key, identity information of a verified party is transmitted in the form of a ciphertext, thereby preventing the identity information of the verified party from being directly exposed during transmission, and ensuring that an attacker cannot obtain private and sensitive information. Two-way or one-way identity authentication between the authentication access controller and the request device is realized, while the confidentiality of entity identity related information is ensured, thereby laying the foundation for ensuring that a user accessing a network is legitimate and/or the network accessed by the user is legitimate. Moreover, the dictionary brute-force attack resistance or quantum computation attack resistance during authentication is enhanced in conjunction with key exchange computation and by means of ingenious detail designs. Also disclosed are an authentication access controller, a request device, a storage medium, a program, and a program product.