Distributed authorization and validation method, device and system

Abstract

The invention discloses an authorization and verification method of a distribution type, which comprises the steps that: on the basis that a first authorization information including authority credential and self credential is generated by service suppliers, an authorization relation with a first service point is built; then the first service point generates a second authorization information containing the authority credential and self credential of the first authorization information, and therefore, an authority relation with service requesters is built. When a service requirement including issued authorization information is put forward by a service requester, the service supplier requires the first service point to verify the self credential of the authorization information in the service requirement, and then verification is carried out by the first service point; if the verification succeeds in the first service point, the authority credential of the authorization information in the service requirement is carried out by the service supplier, and if the verification succeeds, the service requirement is approved.

Description

technical field [0001] The present invention relates to an authorization and verification method, device and system, in particular to a distributed authorization and verification method, device and system. Background technique [0002] As the network becomes more and more popular, service requesters (Service Requester) can use the services provided by countless large and small service providers (Service Provider) through the network. In order to enable the device to share secure services with other devices (Secure Service Sharing), the device as a service provider will first authorize some devices (Delegation), and these devices can authorize other devices, so that all authorized The device can use the service provided by the service provider as a service demander. The authorization relationship (DelegationRelationship) of all devices can be directly managed by the central server (CentralizedManagement). [0003] However, in some cases (for example, in a restricted network...

AI Technical Summary

Problems solved by technology

[0033] Because the method for the initial secure communication link is to concatenate the service provider 21 with the service point 22, 23's sign and authentication data to generate a message to the service demander 24, once the number of service points is large, the generated The message will be too long, which will not only consume a large amount of network communication resources, but also cause the service provider 21 to consume a large amount of computing resources in verification

Images