State maintenance authorization management method and system

Abstract

The invention discloses a state maintenance authorization management method and system. The method comprises the following steps: receiving a pre-stored first random number and a first hash message authentication code sent by a terminal after receiving an authorization instruction, and a generated second random number; when the authorization instruction is a first authorization instruction, and when the first hash message authentication code is verified to be correct according to the authentication code of a preset object, the received first random number, a pre-stored third random number and a salt, judging that the terminal passes the authorization, and generating a fourth random number; calculating a second hash message authentication code according to the authentication code of the preset object, the salt, the second random number and the fourth random number; and sending the fourth random number, the second hash message authentication code and a terminal authorization pass result to the terminal. According to the state maintenance authorization management method and system disclosed by the invention, every time when terminal passes the authorization, the random number is regenerated, a new hash message authentication code is calculated and is sent to the terminal for the next time authorization judgment, the authorization state is recorded, and the application demands of complex occasions are satisfied.

Description

technical field [0001] The invention relates to the technical field of trusted computing, in particular to a state-keeping authorization management method and system. Background technique [0002] Trusted Computing (Trusted Computing) is a trusted computing platform supported by hardware security modules that is widely used in computing and communication systems to improve the overall security of the system. Trusted computing technology is a new generation of security technology. Authorization is an important part of trusted computing technology. It is used to check the terminal's access to resources. Only authorized commands can be executed. [0003] There are many traditional authorization methods, such as password authorization and password challenge / response authorization. In complex situations, each step requires authorization, and the authorization of each step is based on the authorization of the previous step. However, the status of authorization is not recorded in ...

AI Technical Summary

Problems solved by technology

[0004] Based on this, it is necessary to provide a state-keeping authorization management method and system for the problem that the state of authorization is not recorded in the traditional authorization method, which is inconvenient to be used in complex occasions.

Images