Automatic trust establishing method for resource security protection and system thereof

Abstract

The invention discloses an automatic trust establishing method for resource security protection and a system thereof. The method comprises the following steps: analyzing received massages on coordination information of both main bodies requiring trust establishment so as to separate security strategies and credentials; constructing a hybrid coordination tree model representing the set relationship of the security strategies and the credentials of both main bodies requiring trust establishment according to the separated security strategies and credentials, and maintaining the session state of both main bodies requiring trust establishment based on the hybrid coordination tree model; obtaining a disclosure policy for configuration of credentials and security strategies according to the constructed hybrid coordination tree model, and based on the disclosure policy, establishing credentials for both main bodies requiring trust to disclose to each other, constructing a credential chain, and establishing trust between both main bodies. The technical scheme of the invention can be used for rapidly and effectively establishing the credential chain between both main bodies, so as to establish trust between both main bodies. Moreover, the efficiency of trust establishment is high.

Description

technical field [0001] The embodiments of the present invention relate to the field of network technologies, and in particular to a method and system for automatically establishing trust for resource security protection. Background technique [0002] At present, the development of the Internet has had a major impact on the transformation of the computing environment and application models of software systems. Many new network computing models such as Virtual Computing, Pervasive Computing, and Cloud Computing have come into operation. It provides users with more simple and transparent ways to dynamically obtain large-scale computing and storage services, and effectively promotes the effective sharing and comprehensive utilization of resources on the Internet. [0003] At the same time, as technologies such as Service Oriented Architecture (Service Oriented Architecture, SOA) and Software as a Service (SaaS) become increasingly mature, the application mode of software systems...

AI Technical Summary

Problems solved by technology

[0008] (2) The negotiation tree decomposes the nodes whose semantics is policy into trust certificate nodes, lacks the maintenance of the original policy structure, and increases the complexity of tree search and matching algorithm design, the process of trust establishment is complicated, and the efficiency of trust establishment is low

[0009] (3) In terms of the construction of the negotiated trust certificate, many assumptions lack the construction of the trust certificate chain, and the trust certificate often does not directly have a trust relationship

Images