Kerberos security enhancement method based on Intel SGX

Abstract

The invention discloses a Kerberos security enhancement method based on Intel SGX. The method comprises the following steps: (1) security initialization of a Kerberos authentication system; (2) security execution of the authentication service of the KDC key distribution center. (3) secure storage of the key after the authentication service is ended. By introducing Intel SGX hardware and a trusted spatial mechanism of SGX, a safe KDC key distribution center master key storage and use environment in the Kerberos identity authentication system is constructed. The method comprises three modules: a key security initialization module; a key security operation module; and a secret key security storage module. The main key is a long-term key only held by the KDC and is used for encrypting authentication information, so that a secure execution environment is needed, the method can ensure the storage and operation security, and ensures that the bill information cannot be decrypted even if an attacker eavesdrops the information, thereby ensuring the transmission and verification security of the bill.

Description

technical field [0001] This method involves information security, Kerberos identity authentication, Intel SGX technology Background technique [0002] The Kerberos protocol is an important trusted third-party authentication protocol in a distributed network. It is widely used in various mainstream operating systems and cloud computing, big data, Internet of Things and other scenarios. The Kerberos protocol was originally developed by Massachusetts Institute of Technology in the late 1980s. Developed by the Institute of Technology, its design goal is to provide effective authentication services for client / server applications through a key system. Kerberos is suitable for distributed computing on public networks, using encryption technology and distributed database technology. With the development of computer networks, security issues have become increasingly prominent. The identity authentication mechanism is the foundation of network security and the first barrier of commun...

AI Technical Summary

Problems solved by technology

The key is stored in the database. In this way, once the Kerberos database is attacked, the attacker can decrypt the messages in the interaction process, and the security of the system is seriously threatened.

[0017] (2) Operational safety issues

Images