Trust-based cross-domain authentication method

Abstract

The invention relates to a trust-based cross-domain authentication method. The conventional method has the disadvantages of poor compatibility and low efficiency. The method comprises that: a first authentication server in a first trust domain performs identity authentication on a first entity, and sends an authentication result to a second authentication server in a second trust domain; the second authentication server verifies whether the first authentication server is lawful by utilizing the pre-established PKI authentication-based trust relationship, if the first authentication server is lawful, the process is continued, and if the first authentication server is not lawful, the process is finished; and finally, the second authentication server judges whether the received authentication result indicates the first authentication server passes the authentication, if the authentication result indicates the first authentication server passes the authentication, the cross-domain authentication is successful, and if the authentication result indicates the first authentication server does not pass the authentication, the cross-domain authentication is failed. The method simplifies the cross-domain authentication flow and improves the cross-domain authentication efficiency.

Description

technical field [0001] The invention belongs to the field of network security, and in particular relates to a trust-based cross-domain authentication method. Background technique [0002] Cross-domain authentication refers to authentication between clients and servers logged in in different domains. In recent years, with the development of informatization and the needs of information security, various departments, industries, and regions have established corresponding certificate management systems and identity authentication systems, and more and more disputes have emerged between enterprises and institutions in different domains. For business transactions, cross-domain secure access has become an inevitable requirement in a large-scale distributed environment, especially in a multi-domain environment. [0003] At present, when an entity in one domain accesses an entity in another trusting domain across domains, cross-domain authentication generally adopts a method in whic...

AI Technical Summary

Problems solved by technology

[0006] The present invention provides a trust-based cross-domain authentication method aiming at the cumbersome and inefficient problem that the authentication server verifies non-local user credentials in cross-domain authentication