Cross-cloud security certification system and method based on identifier

Abstract

The invention discloses a cross-cloud security certification system and a cross-cloud security certification method based on an identifier, in order to mainly solve the problem that cloud service providers within cloud domains securely manage privacy data of users. The cross-cloud security certification system introduces a layered identifier model and adopts a shared key ring structure, so that identity identifier of the user is unique; the user can get rid of a series of complicated certificate operations, thereby expanding a large-scale cloud network environment. The cross-cloud security certification method comprises the steps of: designing public and private key pairs for the users and the cloud service providers respectively by using the cross-cloud security certification system; sending and verifying messages; and performing key agreement to achieve identifier certification of both certification sides. The cross-cloud security certification system and the cross-cloud security certification method of the invention have the beneficial effects that: a cross-cloud certification model is built and a certificateless key agreement protocol is adopted, each link has safety protection, thus security and reliability of the whole system can be ensured; in addition, a computation complexity is low, thus certification and secure access requirements on the condition that the users in acloud environment respectively belong to different cloud domains can be met, and a practical application requirement that only one-time certification is needed for different cloud domains also can bemet.

Description

technical field [0001] The invention belongs to the technical field of cryptography, in particular to digital signatures and cross-domain authentication, and specifically to an identification-based cross-cloud security authentication system and method, which are widely used in business, government affairs, finance, military and other fields, especially cloud services . Background technique [0002] The number of cloud computing users is huge. In order to enable users to use cloud service resources with confidence, cloud service providers must manage users' private data safely, and whether the entity management of the service system is effective will directly affect the security of information services. To solve this problem, a complete identification authentication mechanism is particularly important. Authentication issues are the foundation of cloud environment trust. Only when authentication issues are resolved, users can achieve a two-way trust relationship with cloud ser...

AI Technical Summary

Problems solved by technology

In 2015, Binu et al. designed a mobile-based remote identity authentication scheme in cloud service scenarios. This scheme uses a certificate management mechanism and has a heavy load; although the scheme proposed by Chen et al. can realize the two-way authentication relationship between users and CSPs , but key escrow is more serious

MishraR in the document "Anonymous Remote User Authentication and Key Agreement for CloudComputing[C] / / Proceedings of the Third International Conference on SoftComputing for Problem Solving, 2014", Dong Z, Zhang L, Li J in the document "SecurityEnhanced Anonymous Remote User Authentication and Key Agreement for CloudComputing[C] / / Computational Science and Engineering, 2014”proposes a cloud authentication scheme based on certificateless cryptography, which realizes the anonymity of user identification, but cannot resist man-in-the-middle attacks, making it impossible for cloud service providers to ensure Authenticity of user identification information

In 2016, the paper "Identity Authentication Scheme Based on PTPM and Certificateless Public Key in Cloud Environment" published by Wang Zhonghua and others proposed an identification authentication scheme, which realized the credibility of authentication results between users and cloud service providers. , but does not consider issues such as anonymity of user identity and cross-cloud authentication

[0005] The public key cryptography system based on public key infrastructure is not enough to guarantee the issuance of certificates for many users, which will bring cumbersome certificate operation problems; the public key key system based on identification has serious key escrow; the certificateless public key cryptography system is not suitable Efficient use in large cloud network environments

Images