Method, device, and system for identity authentication

• US 10,291,614 B2
• Filed: 03/12/2013
• Issued: 05/14/2019
• Est. Priority Date: 03/12/2012
• Status: Active Grant

• Current Assignee: China Iwncomm Co., Ltd
• Original Assignee: China Iwncomm Co., Ltd
• Inventors: Du, Zhiqiang, Cao, Jun, Tie, Manxia, Li, Yi
• Primary Examiner(s): Moorthy, Aravind K
• Assistant Examiner(s): Chao, Michael W
• Application Number:
  US14/384,445
• Publication Number:
  US 20150128238A1
• Time in Patent Office: 2,254 Days
• CPC Class Codes: H04L 2209/42 Anonymization, e.g. involving pseudonyms
• CPC Class Codes: H04L 63/0421 Anonymous communication, i.e. the party's identifiers are hidden from the other party or parties, e.g. using an anonymizer
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

The present invention relates to the field of identity authentication. Provided are a method, device, and system for identity authentication, solving the technical problem that existing identity authentication technologies are incapable of protecting personal privacy, and that authentication technologies comprising personal privacy must provide a traceability feature. The method for identity authentication mainly comprises: a first authenticator transmitting to a second authenticator a first identity authentication message; the second authenticator transmitting to an authentication server a second identity authentication message; the authentication server verifying the validity of a secure domain where the second authenticator is at on the basis of the second identity authentication message; the authentication server returning to the second authenticator a third identity authentication message; when the third identity authentication message is received by the second authenticator, same transmitting to the first authenticator a fourth identity authentication message.

Claims

1. An identity authentication method, comprising:

1) transmitting, by a first authenticator, a first identity authentication message to a second authenticator, wherein the first identity authentication message comprises a first time-varying parameter which is generated by the first authenticator;

2) transmitting, by the second authenticator, a second identity authentication message to an authentication server, wherein the second identity authentication message comprises an identification of a security domain in which the second authenticator is located, wherein the security domain is a logical partition with a boundary in which the second authenticator and at least one entity share certain public authentication information which is a public key, the second authenticator and the at least one entity in the security domain each has own private authentication information which is used to generate the identity authentication information for authenticating the entity by other authentication device, and the private authentication information is a private key or an anonymous signature secret key;

3) verifying, by the authentication server, after having received the second identity authentication message, legality of the security domain in which the second authenticator is located according to the second identity authentication message, to generate a verification result for the security domain in which the second authenticator is located;

4) returning, by the authentication server, a third identity authentication message to the second authenticator, wherein the third identity authentication message comprises the verification result for the security domain in which the second authenticator is located and the identity authentication information of the authentication server for the information including the verification result for the security domain in which the second authenticator is located;

5) transmitting, by the second authenticator, after having received the third identity authentication message, a fourth identity authentication message to the first authenticator, wherein the fourth identity authentication message comprises the identification of the security domain in which the second authenticator is located, the verification result for the security domain in which the second authenticator is located, the identity authentication information of the authentication server for the information including the verification result for the security domain in which the second authenticator is located and the identity authentication information of the second authenticator for the information including an identifier of the first authenticator and the first time-varying parameter; and

6) verifying, by the first authenticator, after having received the fourth identity authentication message, the fourth identity authentication message including verifying the first time-varying parameter in the fourth identity authentication message, and determining legality of an identity of the second authenticator according to the verification result, wherein the step

     6) comprises steps of;

6.1) verifying, by the first authenticator, whether the identity authentication information of the authentication server is valid;

proceeding to step 6.2) in a case that the identity authentication information of the authentication server is valid;

or otherwise, determining that the second authenticator is illegal;

6.2) proceeding to step 6.3) in a case that the security domain in which the second authenticator is located is determined by the first authenticator to be legal according to the verification result for the security domain in which the second authenticator is located;

or otherwise determining that the second authenticator is illegal; and

6.3) acquiring, by the first authenticator, the public authentication information of the security domain in which the second authenticator is located, verifying whether the identity authentication information of the second authenticator is valid according to the public authentication information, and checking whether the identifier of the first authenticator is the same as the identifier of the first authenticator included in the identity authentication information of the second authenticator;

determining that the second authenticator is legal, in a case that the identity authentication information of the second authenticator is valid and the identifier of the first authenticator is the same as the identifier of the first authenticator included in the identity authentication information of the second authenticator;

or otherwise, determining that the second authenticator is illegal.

2. The identity authentication method according to claim 1, wherein the verifying, by the authentication server, legality of the security domain in which the second authenticator is located according to the second identity authentication message in step 3) further comprises:

looking up, by the authentication server, public authentication information of the security domain in which the second authenticator is located, if the identification of the security domain in which the second authenticator is located in the second identity authentication message is the identifier of the security domain in which the second authenticator is located;

determining that the security domain in which the second authenticator is located is legal, in a case that the public authentication information of the security domain in which the second authenticator is located is found;

or otherwise, determining that the security domain in which the second authenticator is located is illegal;

or

checking, by the authentication server, the validity of the identity certification information of the security domain in which the second authenticator is located, if the identification of the security domain in which the second authenticator is located in the second identity authentication message is the identity certification information of the security domain in which the second authenticator is located;

determining that the security domain in which the second authenticator is located is legal, in a case that the identity certification information of the security domain in which the second authenticator is located is valid;

or otherwise, determining that the security domain in which the second authenticator is located is illegal.

3. The identity authentication method according to claim 1, wherein

the second identity authentication message in step 2) further comprises the first time-varying parameter;

the identity authentication information of the authentication server in the third identity authentication message in step

     4) further comprises the first time-varying parameter;

the identity authentication information of the second authenticator in the fourth identity authentication message in step

     5) further comprises the first time-varying parameter; and

the verifying, by the first authenticator, the fourth identity authentication message and determining legality of the second authenticator according to the verification result in step

     6), comprises steps of;

6.1) verifying, by the first authenticator, whether the identity authentication information of the authentication server is valid, and verifying whether the first time-varying parameter generated by the first authenticator in the first identity authentication message is the same as the first time-varying parameter included in the identity authentication information of the authentication server;

proceeding to step 6.2) in a case that the identity authentication information of the authentication server is valid and the first time-varying parameter generated by the first authenticator in the first identity authentication message is the same as the first time-varying parameter included in the identity authentication information of the authentication server;

or otherwise, determining that the second authenticator is illegal;

6.2) proceeding to step 6.3) in a case that the security domain in which the second authenticator is located is determined by the first authenticator to be legal according to the verification result for the security domain in which the second authenticator is located;

or otherwise, determining that the second authenticator is illegal; and

6.3) acquiring, by the first authenticator, the public authentication information of the security domain in which the second authenticator is located, verifying whether the identity authentication information of the second authenticator is valid according to the public authentication information, checking whether the identifier of the first authenticator is the same as the identifier of the first authenticator included in the identity authentication information of the second authenticator, and checking whether the first time-varying parameter generated by the first authenticator in the first identity authentication message is the same as the first time-varying parameter included in the identity authentication information of the second authenticator;

determining that the second authenticator is legal, in a case that the identity authentication information of the second authenticator is valid, the identifier of the first authenticator is the same as the identifier of the first authenticator included in the identity authentication information of the second authenticator, and the first time-varying parameter generated by the first authenticator in the first identity authentication message corresponds to the first time-varying parameter included in the identity authentication information of the second authenticator;

or otherwise, determining that the second authenticator is illegal.

4. The identity authentication method according to claim 1, wherein

the first identity authentication message in step 1) further comprises the identification of the first authenticator;

the second identity authentication message in step

     2) further comprises the identification of the first authenticator;

the identity authentication method further comprises in step

     3);

verifying, by the authentication server, the legality of the first authenticator according to the second identity authentication message, to generate the verification result for the first authenticator;

in step

     4), the third identity authentication message further comprises the verification result of the first authenticator and the identity authentication information of the authentication server for the information including the verification result of the first authenticator;

or the third identity authentication message further comprises the verification result of the first authenticator, and the identity authentication information of the authentication server in the third identity authentication message further comprises the verification result of the first authenticator; and

the identity authentication method further comprises steps of;

7) transmitting, by the first authenticator, a fifth identity authentication message to the second authenticator, wherein the fifth identity authentication message comprises the identity authentication information of the first authenticator for the information including the identifier of the second authenticator; and

8) verifying, by the second authenticator, after having received the fifth identity authentication message, the legality of the identity of the first authenticator.

5. The identity authentication method according to claim 4, wherein the verifying, by the authentication server, the legality of the first authenticator according to the second identity authentication message in step 3) further comprises:

looking for, by the authentication server, the public authentication information of the first authenticator, in a case that the identification of the first authenticator in the second identity authentication message is the identifier of the first authenticator;

determining that the first authenticator is legal, in a case that the public authentication information is found;

or otherwise, determining that the first authenticator is illegal;

or

verifying, by the authentication server, the validity of the identity certification information, in a case that the identification of the first authenticator in the second identity authentication message is the identity certification information of the first authenticator;

determining that the first authenticator is legal, in a case that the identity certification information is valid;

or otherwise, determining that the first authenticator is illegal.

6. The identity authentication method according to claim 4, wherein the verifying, by the second authenticator, the legality of the first authenticator in step 8) further comprises steps of:

8.1) verifying, by the second authenticator, whether the identity authentication information of the authentication server for the information including the verification result of the first authenticator is valid;

proceeding to step 8.2), in a case that the identity authentication information is valid;

or otherwise, determining that the first authenticator is illegal;

8.2) proceeding to step 8.3), in a case that the first authenticator is determined by the second authenticator to be legal according to the verification result of the first authenticator by the authentication server;

or otherwise, determining that the first authenticator is illegal; and

8.3) acquiring, by the second authenticator, the public authentication information of the first authenticator, verifying whether the identity authentication information of the first authenticator is valid according to the public authentication information, and checking whether the identifier of the security domain in which the second authenticator is located is the same as the identifier of the security domain in which the second authenticator is located which is included in the identity authentication information of the first authenticator;

determining that the first authenticator is legal, in a case that the identity authentication information of the first authenticator is valid and the identifier of the security domain in which the second authenticator is located is the same as the identifier of the security domain in which the second authenticator is located which is included in the identity authentication information of the first authenticator;

or otherwise, determining that the first authenticator is illegal.

7. The identity authentication method according to claim 4, wherein

in step 5), before transmitting the fourth identity authentication message to the first authenticator, the second authenticator verifies whether the identity authentication information of the authentication server for the information including the verification result of the first authenticator is valid;

and in the case that it is verified that the identity authentication information of the authentication server for the information including the verification result of the first authenticator is valid, the second authenticator transmits the fourth identity authentication message to the first authenticator; and

in step

     8), the verifying, by the second authenticator, the legality of the first authenticator further comprises steps of;

8.1) proceeding to step 8.2), in a case that the first authenticator is determined by the second authenticator to be legal according to the verification result of the first authenticator by the authentication server;

or otherwise, determining that the first authenticator is illegal; and

8.2) acquiring, by the second authenticator, the public authentication information of the first authenticator, verifying whether the identity authentication information of the first authenticator is valid according to the public authentication information, and checking whether the identifier of the security domain in which the second authenticator is located is the same as the identifier of the security domain in which the second authenticator is located which is included in the identity authentication information of the first authenticator;

determining that the first authenticator is legal, in a case that the identity authentication information of the first authenticator is valid and the identifier of the security domain in which the second authenticator is located is the same as the identifier of the security domain in which the second authenticator is located which is included in the identity authentication information of the first authenticator;

or otherwise, determining that the first authenticator is illegal.

8. The identity authentication method according to claim 4, wherein

in step 2), the second identity authentication message further comprises a second time-varying parameter which is generated by the second authenticator;

in step

     3), the identity authentication information of the authentication server for the information including the verification result of the first authenticator in the third identity authentication message further comprises a second time-varying parameter;

in step

     5), the fourth identity authentication message further comprises a fourth time-varying parameter generated by the second authenticator; and

in step

     8), the verifying, by the second authenticator, the legality of the first authenticator further comprises steps of;

8.1) verifying, by the second authenticator, whether the identity authentication information of the authentication server for the information including the verification result of the first authenticator is valid, and checking whether the second time-varying parameter generated by the second authenticator in the second identity authentication message is the same as the second time-varying parameter included in the identity authentication information of the authentication server for the information including the second time-varying parameter;

proceeding to step 8.2), in a case that the identity authentication information is valid and the second time-varying parameter generated by the second authenticator in the second identity authentication message is the same as the second time-varying parameter included in the identity authentication information of the authentication server for the information including the second time-varying parameter;

or otherwise, determining that the first authenticator is illegal;

8.2) proceeding to step 8.3), in a case that the first authenticator is determined by the second authenticator to be legal according to the verification result of the first authenticator from the authentication server;

or otherwise, determining that the first authenticator is illegal; and

8.3) acquiring, by the second authenticator, the public authentication information of the first authenticator, verifying whether the identity authentication information of the first authenticator is valid according to the public authentication information, checking whether the identifier of the security domain in which the second authenticator is located is the same as the identifier of the security domain in which the second authenticator is located which is included in the identity authentication information of the first authenticator, and checking whether the fourth time-varying parameter generated by the second authenticator in the fourth identity authentication message is the same as the fourth time-varying parameter included in the identity authentication information of the first authenticator;

determining that the first authenticator is legal, in a case that the identity authentication information of the first authenticator is valid, and the identifier of the security domain in which the second authenticator is located is the same as the identifier of the security domain in which the second authenticator is located which is included in the identity authentication information of the first authenticator, and the fourth time-varying parameter generated by the second authenticator in the fourth identity authentication message is the same as the fourth time-varying parameter included in the identity authentication information of the first authenticator;

or otherwise, determining that the first authenticator is illegal.

9. The identity authentication method according to claim 4, wherein

in step 2), the second identity authentication message further comprises a second time-varying parameter which is generated by the second authenticator;

in step

     3), the identity authentication information of the authentication server for the information including the verification result of the first authenticator in the third identity authentication message further comprises a second time-varying parameter;

in step

     5), before transmitting the fourth identity authentication message to the first authenticator, the second authenticator firstly verifies whether the identity authentication information of the authentication server for the information including the verification result of the first authenticator is valid, and checks whether the second time-varying parameter generated by the second authenticator in the second identity authentication message is the same as the first time-varying parameter included in the identity authentication information of the authentication server for the information including the verification result of the first authenticator; and

in a case that the identity authentication information of the authentication server for the information including the verification result of the first authenticator is valid and the second time-varying parameter generated by the second authenticator in the second identity authentication message is the same as the first time-varying parameter included in the identity authentication information of the authentication server for the information including the verification result of the first authenticator, the second authenticator transmits the fourth identity authentication message to the first authenticator, wherein the fourth identity authentication message further comprises a fourth time-varying parameter generated by the second authenticator; and

in step

     8), the verifying, by the second authenticator, the legality of the first authenticator further comprises steps of;

8.1) proceeding to step 8.2), in a case that the first authenticator is determined by the second authenticator to be legal according to the verification result of the first authenticator from the authentication server;

or otherwise, determining that the first authenticator is illegal; and

8.2) acquiring, by the second authenticator, the public authentication information of the first authenticator, verifying whether the identity authentication information of the first authenticator is valid according to the public authentication information, checking whether the identifier of the security domain in which the second authenticator is located is the same as the identifier of the security domain in which the second authenticator is located which is included in the identity authentication information of the first authenticator, and checking whether the fourth time-varying parameter generated by the second authenticator in the fourth identity authentication message is the same as the fourth time-varying parameter included in the identity authentication information of the first authenticator;

determining that the first authenticator is legal, in a case that the identity authentication information of the first authenticator is valid, the identifier of the security domain in which the second authenticator is located is the same as the identifier of the security domain in which the second authenticator is located which is included in the identity authentication information of the first authenticator, and the fourth time-varying parameter generated by the second authenticator in the fourth identity authentication message is the same as the fourth time-varying parameter included in the identity authentication information of the first authenticator;

or otherwise, determining that the first authenticator is illegal.

10. The identity authentication method according to claim 1, wherein the identity authentication method further comprises:

step

     0) transmitting, by the second authenticator, the zero-th identity authentication message to the first authenticator, wherein the zero-th identity authentication message comprises the identification of the security domain in which the second authenticator is located;

wherein the first identity authentication message in step

     1) further comprises the identification of the first authenticator, and

the second identity authentication message in step

     2) further comprises the identification of the first authenticator; and

the identity authentication method further comprises;

in step

     3), verifying, by the authentication server, the legality of the first authenticator according to the second identity authentication message, to generate the verification result of the first authenticator;

wherein in step

     4), the third identity authentication message further comprises the verification result of the first authenticator and the identity authentication information of the authentication server for the information including the verification result of the first authenticator;

or the third identity authentication message further comprises the verification result of the first authenticator, and the identity authentication information of the authentication server in the third identity authentication message further comprises the verification result of the first authenticator; and

the identity authentication method further comprises;

in step

     5), removing the identification of the security domain in which the second authenticator is located in the fourth identity authentication message;

before transmitting the fourth identity authentication message, verifying, by the second authenticator, the third identity authentication message and determining the legality of the first authenticator according to the verification result.

11. The identity authentication method according to claim 10, wherein the verifying, by the authentication server, the legality of the first authenticator according to the second identity authentication message in step 3) further comprises:

looking for, by the authentication server, the public authentication information of the first authenticator, in a case that the identification of the first authenticator in the second identity authentication message is the identifier of the first authenticator;

determining that the first authenticator is legal, in a case that the public authentication information is found;

or otherwise, determining that the first authenticator is illegal;

or

verifying, by the authentication server, the validity of the identity certification information, in a case that the identification of the first authenticator in the second identity authentication message is the identity certification information of the first authenticator;

determining that the first authenticator is legal, in a case that the identity certification information is valid;

or otherwise, determining that the first authenticator is illegal.

12. The identity authentication method according to claim 10, wherein the verifying, by the second authenticator, the third identity authentication message and determining the legality of the first authenticator according to the verification result in step 5) further comprises:

5.1) verifying, by the second authenticator, whether the identity authentication information of the authentication server for the information including the verification result of the first authenticator is valid;

proceeding to step 5.2), in a case that the identity authentication information is valid;

or otherwise, determining that the first authenticator is illegal;

5.2) proceeding to step 5.3), in a case that the first authenticator is determined by the second authenticator to be legal according to the verification result of the first authenticator by the authentication server;

or otherwise, determining that the first authenticator is illegal; and

5.3) acquiring, by the second authenticator, the public authentication information of the first authenticator, verifying whether the identity authentication information of the first authenticator is valid according to the public authentication information, and checking whether the identifier of the security domain in which the second authenticator is located is the same as the identifier of the security domain in which the second authenticator is located which is included in the identity authentication information of the first authenticator;

determining that the first authenticator is legal, in a case that the identity authentication information of the first authenticator is valid and the identifier of the security domain in which the second authenticator is located is the same as the identifier of the security domain in which the second authenticator is located which is included in the identity authentication information of the first authenticator;

or otherwise, determining that the first authenticator is illegal.

13. The identity authentication method according to claim 10, wherein

in step 0), the zero-th identity authentication message further comprises a third time-varying parameter which is generated by the second authenticator;

in step

     1), the first identity authentication message further comprises a third time-varying parameter, and the identity authentication information of the first authenticator further comprises a third time-varying parameter;

in step

     5), the verifying, by the second authenticator, the third identity authentication message and determining the legality of the first authenticator according to the verification result further comprises;

5.1) verifying, by the second authenticator, whether the identity authentication information of the authentication server for the information including the verification result of the first authenticator is valid;

proceeding to step 5.2), in a case that the identity authentication information is valid;

or otherwise, determining that the first authenticator is illegal;

5.2) proceeding to step 5.3), in a case that the first authenticator is determined by the second authenticator to be legal according to the verification result of the first authenticator by the authentication server;

or otherwise, determining that the first authenticator is illegal; and

5.3) acquiring, by the second authenticator, the public authentication information of the first authenticator, verifying whether the identity authentication information of the first authenticator is valid according to the public authentication information, checking whether the identifier of the security domain in which the second authenticator is located is the same as the identifier of the security domain in which the second authenticator is located which is included in the identity authentication information of the first authenticator, and checking whether the third time-varying parameter generated by the second authenticator in the zero-th identity authentication message is the same as the third time-varying parameter included in the identity authentication information of the first authenticator;

determining that the first authenticator is legal, in a case that the identity authentication information of the first authenticator is valid, the identifier of the security domain in which the second authenticator is located is the same as the identifier of the security domain in which the second authenticator is located which is included in the identity authentication information of the first authenticator, and the third time-varying parameter generated by the second authenticator in the zero-th identity authentication message is the same as the third time-varying parameter included in the identity authentication information of the first authenticator;

or otherwise, determining that the first authenticator is illegal.

14. A first authentication device, comprising:

a transmitting unit configured to transmit a first identity authentication message, the first identity authentication message comprising a first time-varying parameter which is generated by the first authentication device to a second authentication device in a security domain which is a logical partition with a boundary in which the second authentication device and at least one entity share certain public authentication information which is a public key, wherein the second authentication device and the at least one entity in the security domain each has own private authentication information which is used to generate the identity authentication information for authenticating the entity by other authentication device, and wherein the transmitting unit comprises a transmitter, and the private authentication information is a private key or an anonymous signature secret key;

a receiving unit configured to receive a fourth identity authentication message comprising the first time-varying parameter returned from the second authentication device, wherein the receiving unit comprises a receiver, and wherein the fourth identity authentication message further comprises the identification of the security domain in which the second authentication device is located, the verification result for the security domain in which the second authentication device is located, the identity authentication information of an authentication server for the information including the verification result for the security domain in which the second authentication device is located and the identity authentication information of the second authentication device for the information including an identifier of the first authentication device; and

a verification unit configured to verify the fourth identity authentication message comprising verification of the first time-varying parameter and determine the legality of the identity of the second authentication device according to the verification result, wherein the verification unit comprises a processor and a memory, and the verification unit is implemented when instructions stored in the memory are performed by the processor, and wherein the processor is configured to;

6.1) verify whether the identity authentication information of the authentication server is valid;

proceed to step 6.2) in a case that the identity authentication information of the authentication server is valid;

or otherwise, determine that the second authentication device is illegal;

6.2) proceed to step 6.3) in a case that the security domain in which the second authentication device is located is determined by the first authentication device to be legal according to the verification result for the security domain in which the second authentication device is located;

or otherwise determine that the second authentication device is illegal; and

6.3) acquire the public authentication information of the security domain in which the second authentication device is located, verify whether the identity authentication information of the second authentication device is valid according to the public authentication information, and check whether the identifier of the first authentication device is the same as the identifier of the first authentication device included in the identity authentication information of the second authentication device;

determine that the second authentication device is legal, in a case that the identity authentication information of the second authentication device is valid and the identifier of the first authentication device is the same as the identifier of the first authentication device included in the identity authentication information of the second authentication device;

or otherwise, determine that the second authentication device is illegal.

15. The first authentication device according to claim 14, wherein

the transmitting unit is further configured to transmit a fifth identity authentication message to the second authentication device, wherein the fifth identity authentication message comprises the identity authentication information of the first authentication device for the information including the identifier of the second authentication device.

16. A second authentication device, comprising:

a transmitting unit configured to transmit a second identity authentication message comprising a first time-varying parameter to an authentication server, wherein the second identity authentication message comprises an identification of a security domain in which the second authentication device is located, wherein the transmitting unit comprises a transmitter, the security domain is a logical partition with a boundary in which the second authentication device and at least one entity share certain public authentication information which is a public key, and the second authentication device and the at least one entity in the security domain each has own private authentication information which is used to generate the identity authentication information for authenticating the entity by other authentication device, and the private authentication information is a private key or an anonymous signature secret key;

a receiving unit configured to;

receive a first identity authentication message sent by a first authentication device, wherein the first identity authentication message comprises the first time-varying parameter, wherein the first time-varying parameter is generated by the first authentication device;

receive a third identity authentication message comprising the first time-varying parameter returned from the authentication server, wherein the receiving unit comprises a receiver, and wherein the third identity authentication message comprises a verification result for the security domain in which the second authentication device is located and the identity authentication information of the authentication server for the information including the verification result for the security domain in which the second authentication device is located; and

wherein after the receiving unit has received the third identity authentication message returned from the authentication server, the transmitting unit transmits a fourth identity authentication message comprising the first time-varying parameter to the first authentication device, the fourth identity authentication message comprises the identification of the security domain in which the second authentication device is located, the verification result for the security domain in which the second authentication device is located, the identity authentication information of the authentication server for the information including the verification result for the security domain in which the second authentication device is located and the identity authentication information of the second authentication device for the information including an identifier of the first authentication device and the first time-varying parameter, and

wherein the fourth identity authentication message is verified and a legality of the second authentication device is determined by the first authentication device by the following steps of;

6.1) verifying whether the identity authentication information of the authentication server is valid;

proceeding to step 6.2) in a case that the identity authentication information of the authentication server is valid;

or otherwise, determining that the second authentication device is illegal;

6.2) proceeding to step 6.3) in a case that the security domain in which the second authentication device is located is determined by the first authentication device to be legal according to the verification result for the security domain in which the second authentication device is located;

or otherwise determining that the second authentication device is illegal; and

6.3) acquiring the public authentication information of the security domain in which the second authentication device is located, verifying whether the identity authentication information of the second authentication device is valid according to the public authentication information, and checking whether the identifier of the first authentication device is the same as the identifier of the first authentication device included in the identity authentication information of the second authentication device;

determining that the second authentication device is legal, in a case that the identity authentication information of the second authentication device is valid and the identifier of the first authentication device is the same as the identifier of the first authentication device included in the identity authentication information of the second authentication device;

or otherwise, determining that the second authentication device is illegal.

17. The second authentication device according to claim 16, wherein

the receiving unit is further configured to receive a fifth identity authentication message sent by the first authentication device;

and

the second authentication device further comprises a verification unit configured to verify the legality of the first authentication device, wherein the verification unit comprises a processor and a memory, and the verification unit is implemented when instructions stored in the memory are performed by the processor.

18. An authentication server, comprising:

a receiving unit configured to receive a second identity authentication message comprising a first time-varying parameter sent by a second authentication device, wherein the receiving unit comprises a receiver, wherein the first time-varying parameter is generated by a first authentication device, and wherein the second identity authentication message comprises an identification of a security domain in which the second authentication device is located;

a verification unit configured to verify the legality of the security domain in which the second authentication device is located according to the second identity authentication message, to generate the verification result for the security domain in which the second authentication device is located, wherein the verification unit comprises a processor and a memory, the verification unit is implemented when instructions stored in the memory are performed by the processor, and the security domain is a logical partition with a boundary in which the second authentication device and at least one entity share certain public authentication information which is a public key, and the second authentication device and the at least one entity in the security domain each has own private authentication information which is used to generate the identity authentication information for authenticating the entity by other authentication device, and the private authentication information is a private key or an anonymous signature secret key; and

a transmitting unit configured to return a third identity authentication message comprising the first time-varying parameter to the second authentication device, wherein the third identity authentication message comprises the verification result for the security domain in which the second authentication device is located and the identity authentication information of the authentication server for the information including the verification result for the security domain in which the second authentication device is located, wherein the transmitting unit comprises a transmitter,

wherein after the second authentication device has received the third identity authentication message returned from the authentication server, the second authentication device transmits a fourth identity authentication message comprising the first time-varying parameter to the first authentication device, and wherein the fourth identity authentication message is verified and a legality of the second authentication device is determined by the first authentication device by the following steps of;

6.1) verifying whether the identity authentication information of the authentication server is valid;

proceeding to step 6.2) in a case that the identity authentication information of the authentication server is valid;

or otherwise, determining that the second authentication device is illegal;

6.2) proceeding to step 6.3) in a case that the security domain in which the second authentication device is located is determined by the first authentication device to be legal according to the verification result for the security domain in which the second authentication device is located;

or otherwise determining that the second authentication device is illegal; and

6.3) acquiring the public authentication information of the security domain in which the second authentication device is located, verifying whether the identity authentication information of the second authentication device is valid according to the public authentication information, and checking whether the identifier of the first authentication device is the same as the identifier of the first authentication device included in the identity authentication information of the second authentication device;

determining that the second authentication device is legal, in a case that the identity authentication information of the second authentication device is valid and the identifier of the first authentication device is the same as the identifier of the first authentication device included in the identity authentication information of the second authentication device;

or otherwise, determining that the second authentication device is illegal;

wherein the fourth identity authentication message comprises the identification of the security domain in which the second authentication device is located, the verification result for the security domain in which the second authentication device is located, the identity authentication information of the authentication server for the information including the verification result for the security domain in which the second authentication device is located and the identity authentication information of the second authentication device for the information including an identifier of the first authentication device and the first time-varying parameter.