Cross-domain server identity authentication method based on trust alliance block chain

Abstract

The invention discloses a cross-domain server identity authentication method based on a trust alliance block chain, comprising the following steps: (1) constructing the trust alliance block chain; (2)authenticating an identity of a server accessed by a user in a public key infrastructure (PKI) domain; (3) authenticating an identity of a server accessed by a user in an identity-based cryptosystem(IBC) domain; (4) setting valid time of each authentication ticket; (5) authenticating the identity of the server accessed by the user in the PKI domain again; and (6) authenticating the identity of the server accessed by the user in the IBC domain again. The method constructs the trust alliance block chain, realizes inter-domain mutual authentication by virtue of mutual authentication among nodesin the trust alliance block chain, then realizes cross-domain authentication on the server, reduces maintenance burden of a bridge center system, reduces computation amount and communication trafficof a user side and has good practicability and expansibility.

Description

technical field [0001] The invention belongs to the technical field of network communication, and further relates to a method for cross-domain authentication server identity based on trust alliance block chain in the technical field of network security. The present invention can be applied to a method for authenticating the identity of the accessed server when a user requests cross-domain access to the server in the certificate-based public key infrastructure PKI (Public Key Infrastructure) and identity-based cryptosystem IBC (Identity-Based Cryptography) domains . Background technique [0002] At present, certificate-based public key infrastructure PKI and identity-based cryptographic system IBC are widely used in the trust domain authentication framework based on public keys. When an identity-based cryptographic system IBC domain user accesses a public key infrastructure PKI domain server, or a public key infrastructure PKI domain user accesses an identity-based cryptogra...

AI Technical Summary

Problems solved by technology

The shortcomings of this method are: first, the identity of the bridge IKI system needs to be trusted and maintained, which increases the maintenance burden; second, when the number of IKI systems increases, the storage burden of the bridge IKI system increases. If multiple bridge IKI systems are set, Increase the user's storage burden

The disadvantages of this method are: since the client performs four interactive communications during this authentication process, operations such as authorization ticket, session key, and signature encryption need to be performed before the communication, resulting in the amount of calculation and communication carried by the client. Large amount, not suitable for lightweight mobile user terminals with limited resources

Images