Patent ID: 8356179
Filing Date: 2013-01-15
Classification: H04L

Abstract:
1. A method for mutual authentication of entities based upon a trusted third party, comprising: step 1). transmitting a first message from a first entity to a second entity, the first message comprising a first time variant parameter R step 2). transmitting a second message from the second entity to the first entity on reception of the first message, the second message comprising a token TokenBA transmitted from the second entity to the first entity, an identifier ID step 3). transmitting a third message from the first entity to a third entity upon reception of the second message, the third message comprising a second time variant parameter R step 4). verifying by the third entity upon reception of the third message whether the first entity and the second entity are legal, and performing a presetting process in response to a verification result; step 5). transmitting a fourth message from the third entity to the first entity, the fourth message comprising a token TokenTA transmitted from the third entity to the first entity and a fourth optional text field Text step 6). verifying the fourth message by the first entity upon reception of the fourth message, to complete the authentication of the second entity after the first entity verifies the fourth message; step 7). transmitting a fifth message from the first entity to the second entity, the fifth message comprising the token TokenTA transmitted from the third entity to the first entity, a token TokenAB transmitted from the first entity to the second entity and a fifth optional text field Text step 8). verifying the fifth message by the second entity upon reception of the fifth message, to complete the authentication of the first entity after the second entity verifies the fifth message; wherein the step 6) of verifying the fourth message by the first entity comprises: 601. verifying a signature of the third entity contained in the TokenTA or a first sub-token TokenTA 602. obtaining a public key of the second entity, verifying a signature of the second entity contained in the TokenBA in the second message and whether the R