NETWORK AUTHENTICATION SERVICE SYSTEM AND METHOD

• US 20110035582A1
• Filed: 09/17/2010
• Published: 02/10/2011
• Est. Priority Date: 03/17/2008
• Status: Abandoned Application

• Current Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Original Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Inventors: ZHENG, Hongwei
• Application Number:
  US12/885,216
• Publication Number:
  US 20110035582A1
• Time in Patent Office: Days
• US Class Current: 713/152
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32

Abstract

A network authentication service system and method are provided. The network authentication service system is applied to a network application layer and includes: a Web service security device, adapted to intercept a message exchanged in the network application layer; and an authentication server, adapted to perform authentication processing for the message intercepted by the Web service security device. The network authentication service method includes: intercepting a request message of a network application layer; performing encryption processing for the request message to obtain an encrypted message; performing authentication processing for the encrypted message; and decrypting the encrypted message that passes the authentication. Thus security processing can be performed for the transmitted message, and various security authentication manners can be available.

Claims

1. A network authentication service method, comprising:

intercepting, by a client OutHandler, a request message of a network application layer;

performing, by the client OutHandler, encryption processing for the request message to obtain an encrypted message, and sending the encrypted message to a Web service server;

receiving, by a server InHandler, the encrypted message, and performing authentication processing for the encrypted message; and

decrypting, by the server InHandler, the encrypted message that passes the authentication.

2. The network authentication service method according to claim 1, wherein the performing encryption processing for the request message to obtain an encrypted message comprises:

sending a requisition message to an authentication server for obtaining a first authentication code;

obtaining the first authentication code from the authentication server, and generating a random number;

searching out a user password according to a user name carried in the request message; and

generating a first response string according to the first authentication code, the random number, the user name, the user password, and a message body of the request message, and encrypting and encapsulating the request message using the first response string and the user name to obtain the encrypted message.

3. The network authentication service method according to claim 2, wherein the performing authentication processing for the encrypted message comprises:

obtaining the first authentication code and the user password according to the user name carried in the encrypted message;

generating a second response string according to the first authentication code, the user name, the user password, and the message body of the received encrypted message, and

determining, by the authentication server, the received encrypted message as passing the authentication if the first response string is identical to the second response string.

4. The network authentication service method according to claim 1, further comprising:

intercepting, by a server OutHandler, a response message which corresponds to the encrypted message;

adding, by the server OutHandler, authentication to the response message to obtain an authentication message;

intercepting, by a client InHandler, the authentication message, and performing authentication processing for the authentication message; and

decrypting, by the client InHandler, the authentication message that passes the authentication.

5. The network authentication service method according to claim 4, wherein the adding authentication to the response message to obtain an authentication message comprises:

obtaining a second authentication code; and

encapsulating the response message using the second authentication code to obtain the authentication message.

6. The network authentication service method according to claim 5, wherein the performing authentication processing for the authentication message comprises:

determining, by the authentication server, the authentication message as passing the authentication if the second authentication code carried in the authentication message is identical to a stored second authentication code.

7. A network authentication service system, comprising:

a client OutHandler, configured to intercept a request message of a network application layer, perform encryption processing for the request message to obtain an encrypted message, and send the encrypted message to a Web service server; and

a server InHandler, configured to receive the encrypted message, perform authentication processing for the encrypted message, and decrypt the encrypted message that passes the authentication.

8. The network authentication service system according to claim 7, further comprising:

an authentication server, wherein the client OutHandler is further configured to send a requisition message to the authentication server for obtaining a first authentication code, obtain the first authentication code from the authentication server, generate a random number, search out a user password according to a user name carried in the request message, generate a first response string according to the first authentication code, the random number, the user name, the user password, and a message body of the request message, and encrypt and encapsulate the request message using the first response string and the user name to obtain the encrypted message.

9. The network authentication service system according to claim 8, wherein the server InHandler is further configured to obtain the first authentication code and the user password according to the user name carried in the encrypted message, generate a second response string according to the first authentication code, the user name, the user password, and the message body of the received encrypted message;

and

the authentication server is further configured to determine the received encrypted message as passing the authentication if the first response string is identical to the second response string.

10. The network authentication service system according to claim 7, further comprising:

a server OutHandler, configured to intercept a response message which corresponds to the encrypted message and add authentication to the response message to obtain an authentication message; and

a client InHandler, configured to intercept the authentication message, perform authentication processing for the authentication message, and decrypt the authentication message that passes the authentication.

11. The network authentication service system according to claim 10, wherein the server OutHandler is further configured to obtain a second authentication code and encapsulate the response message using the second authentication code to obtain the authentication message.

12. The network authentication service system according to claim 11, wherein the authentication server is further configured to determine the authentication message as passing the authentication if the second authentication code carried in the authentication message is identical to a stored second authentication code.