Cross-domain anonymous resource sharing platform and implementing method thereof

Abstract

The invention discloses a cross-domain anonymous resource sharing platform and an implementing method thereof. The platform comprises an anonymous identity authentication module, a resource uploading module and an access control module. According to the invention, anonymous identity authentication on a user is implemented by the anonymous identity authentication module, and authorization management on the user is implemented by methods of access control and the like. According to the invention, firstly, by analysis on an attribute certification structure, anonymous identity authentication on the user and construction of a user attribute library on the basis of protecting user identity privacy are implemented. Based on identity authentication, access strategy making for uploaded resources is implemented by the resource uploading module, the access control module judges whether a visitor has an access permission according to each entity attribute and strategy so as to ensure security of resources, and finally, anonymous cross-domain authentication management on the user is implemented and a fine-grained resource sharing mode is implemented. Meanwhile, the cross-domain anonymous resource sharing platform and the implementing method thereof have effectiveness, dynamics and the like.

Description

technical field [0001] The invention relates to PKI / PMI-based anonymous identity authentication, XACML-based access control technology and anonymous cross-domain authorization method in information security. Background technique [0002] With the increasing development of Internet technology, the Internet provides us with massive information resources, various application systems emerge in an endless stream, and the sharing of information resources between different application systems is becoming more and more frequent. However, the construction methods and permission management methods of different systems are often very different, and they are quite closed, which brings great inconvenience to the information sharing between different systems. For example, some organizations have many independent subsystems, and each subsystem has its own authority management method, and often cannot access each other to obtain information, and has become an "information island". In addit...

AI Technical Summary

Problems solved by technology

In today's open environment, the traditional role-based access control (RBAC) seems to be based on a single authorization basis

Images