| 摘要 |
<p>An authentication method of the present invention comprises: an access point (AP) randomly selects n1 authentication servers as certificate authentication servers from N candidate authentication servers and notifies the selected authentication servers; each certificate authentication server signs public key information of the AP and a mobile terminal (MT) by using respective sub-key to generate an AP sub-certificate and an MT sub-certificate, exchanges the generated AP sub-certificate and MT sub-certificate with other certificate authentication servers, and verifies the validity of each AP sub-certificate and MT sub-certificate; when the number of valid AP sub-certificates and the number of valid MT sub-certificates both exceed or equal to a threshold value t, each certificate authentication server combines the valid AP sub-certificates into an AP certificate and combines the valid MT sub-certificates into an MT certificate; the certificate authentication servers verify the validity of the AP certificate and the MT certificate. The authentication method, authentication system and authentication server of the present invention can improve the security of the certificate authentication.</p> |
