Cross-domain authentication method between Kerberos and PKI safety domains based on alliance chain

Abstract

The invention relates to a cross-domain authentication method between Kerberos and PKI safety domains of an alliance chain, and belongs to the technical field of computer safety. The method comprises the steps of constructing a Kerberos and PKI inter-domain identity authentication model based on an alliance chain, performing primary cross-domain identity authentication from a Kerberos safety domain to a PKI safety domain, performing primary cross-domain identity authentication from the PKI safety domain to the Kerberos safety domain, and performing cross-domain re-identity authentication from the Kerberos safety domain to the PKI safety domain. According to the method, the block chain model is used as a basis, a consensus mechanism of an alliance chain is adopted, and the entity authentication method between the PKI domain and the Kerberos domain is provided, so that cross-domain authentication certificates can be reliably stored in different safety domains in a tamper-proof manner, and cross-domain identity authentication is realized while safety and reliability are ensured.

Description

technical field [0001] The invention relates to a cross-domain authentication technology between different entities, specifically, based on the block chain technology, the authentication technology between the Kerberos security domain and the PKI security domain is realized. Background technique [0002] With the development of informatization and networking, we have entered the era of big data. As big data moves from concept to value, big data security and privacy issues have become increasingly prominent. [0003] In the Internet, the sharing and exchange of data in a distributed environment requires security guarantees, and cross-domain authentication is an important means to achieve safe sharing and exchange of big data. Blockchain technology can reduce the cost of sharing and exchanging big data in a distributed environment, and enhance data trust in sharing and exchanging. [0004] Traditional identity authentication technology generally adopts a centralized CA organ...

AI Technical Summary

Problems solved by technology

[0006] Aiming at technical problems such as difficult management of cross-domain identity authentication, inability to share identity information between different security domains, and incompatibility of inter-domain authentication, the present invention proposes a blockchain-based cross-domain identity authentication technology to realize inter-domain identity authentication. Trust sharing to ensure the reliability, security and compatibility of cross-domain identity authentication

Images