Patent ID: 8526607

Claim:
An identity authentication and shared key generation method, comprising a key authority for issuing a public key and a private key to a device; each device having at least a pair of public key P i and private key S i ; the key authority setting a correlation coefficient k, a regression coefficient a, a modulus m and an offset vector e wherein the k and the a are natural numbers and the k is not equal to zero, the , the and the {right arrow over (e)} are vectors of 1×n, and the n is a natural member not less than 2; a public key of an authentication initiator device being set as {right arrow over (p A )} and a private key thereof being set as {right arrow over (s A )}, a public key of an authentication participant being set as {right arrow over (p B )}, and a private key thereof being set as {right arrow over (s B )}; the method comprising the following steps: a initiating, by the authentication initiator device, an authentication request and transferring the public key {right arrow over (p A )} thereof to the authentication participant; b transferring, by the authentication participant, the public key {right arrow over (p B )} thereof to the authentication initiator device after receiving the authentication request; c computing a first authentication value M A , by the authentication initiator device, M A = k × ( p B -> × s A T -> + p B -> × e T -> + a ) ⁢ mod ⁢ ⁢ m ; computing a second authentication value M B , by the authentication participant, M B = k × ( p A -> × s B T -> + p A -> × e T -> + a ) ⁢ mod ⁢ ⁢ m ; wherein the {right arrow over (s A T )} is a transposed vector of the {right arrow over (s A )}, the {right arrow over (e T )} is a transposed vector of the {right arrow over (e)}, and the {right arrow over (s B T )} is a transposed vector of the {right arrow over (s B )}; and d considering that authentication is successful if the first authentication value M A and the second authentication value M B as bases of authentication are identical, or considering that the authentication fails if the first authentication value M A and the second authentication value M B are different.