A Mimic Defense System Based on Certificate Identity Authentication and Certificate Issuing Method

Abstract

The invention discloses a mimetic defense system based on certificate identity authentication and a certificate issuing method, which are applied in the technical field of network security. The system includes bottom equipment, an intermediate controller, and a certificate issuing center. There is a unique certificate, which stores its own public key, and the corresponding private key is kept privately by each device and is not disclosed to the outside world; in the method described above, the device sends a certificate request file to the intermediate controller, and the intermediate controller issues a certificate to the certificate after verifying its identity. The center applies for a certificate, and the certificate issuing center issues the certificate and sends it to the underlying device through the intermediate controller, and the underlying device installs the certificate. The intermediate controller adopting the mimetic structure of the present invention can effectively resist the attack of the attacker, and at the same time, if the output results of the heterogeneous executives are inconsistent when the judgment module is working, it can also judge in time whether the heterogeneous executives are attacked, and repair the system in time .

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a mimetic defense system based on certificate identity authentication and a certificate issuing method. Background technique [0002] Cyberspace mimicry defense theory is an active defense theory, which is used to deal with unknown threats based on unknown vulnerabilities, backdoors, viruses or Trojan horses at the application level in different fields in cyberspace. [0003] figure 1 It is a typical dynamic heterogeneous redundant architecture of the mimic defense system. When a message is input, it is transmitted to each heterogeneous executive in the heterogeneous pool through the input agent. After all the heterogeneous executives process the message, the result is transmitted to the multi-mode arbitration module. If the results are consistent, output them. If they are not consistent, it is possible to identify an exception in the output message of a certain executi...

AI Technical Summary

Problems solved by technology

[0006] Purpose of the invention: Aiming at the defects in the prior art that certificates cannot be issued to devices in mimic defense under the premise of security, the present invention discloses a mimic defense system based on certificate identity authentication and a certificate issuing method. The mimic defense system includes The underlying device, the intermediate controller and the certificate issuance center; the intermediate controller adopting the mimic structure can effectively resist the attack of the attacker, and the back door of each heterogeneous executive is different, and the attacker cannot understand the properties of the isomer and carry out targeted attacks, each heterogeneous implementation manages a certificate revocation list, greatly improving security

Images