System and method for implementing authorisation session authentication between entities

Abstract

The invention relates to the entity security certification field, which discloses a system for realizing authorization session certification between entities, and is applied to a computer system or a computer platform. The system comprises at least one requester entity, at least one requested entity, wherein the requester entity comprises a first session module, and the requested entity comprisesa second session module, a functional module and a second certificating module. The first session module and a second session module are used to create and perform a session between the requester entity and the requested entity, and the second certificating module is used to verify whether the requester entity has permission to call functions of the functional module of the requested entity nor not. Additionally, the invention further discloses a method for realizing authorization session certification between entities by applying the system.

Description

technical field [0001] The invention relates to the field of security authentication of entities, in particular to a system and method for realizing authorization session authentication between entities. Background technique [0002] With the rapid development of computer technology, integration and security have gradually become one of the important topics that attract people's attention. The requirement for the miniaturization of computer systems and equipment has promoted the continuous progress of computer integration. Today, computer software and hardware have a high degree of integration in terms of volume and function. However, due to different requirements for compatibility and security levels, the integration in computers usually has certain restrictions. Generally speaking, different computer entities (such as equipment, software or platform modules, etc.) will integrate a specific type of Or different kinds of functions required to achieve a common purpose, so th...

AI Technical Summary

Problems solved by technology

At this time, if the function a provided by the entity B has authority restrictions, that is, only those with specific authority can perform the function a, then a method should be set up to authenticate the authority of entity A, and only after the authentication, determine Entity A is only allowed to execute the content of function a through entity B only when entity A also has the permission to perform function a. Otherwise, the permission restriction attached to function a in entity B will not be able to truly achieve the purpose of restricting use

Images