Trust negotiation building method and system based on history roles

Abstract

The invention discloses a trust negotiation building method based on history roles, which comprises the following steps that: (1) when a request party submits requests on a certain resource to a resource party, firstly, a chinchin stage of the trust negotiation is triggered, and the identities of the two parties and whether the historical negotiation success record information exists or not are verified; (2) after the chinchin stage is completed, the two parties enter a trust development period, a safe certificate disclosing sequence is found out to visit the requested resources through mutually disclosing visit control tactics and certificates; and (3) the two parties enter the trust maintenance stage after the trust negotiation is successful, relevant information of the other negotiation party in the current negotiation is stored for accelerating the subsequent negotiation process of the two parties. The method provided by the invention has the advantages that the successfully negotiated two parties update the roles for the other parties in self history information databases and record and obtain the certificate disclosing sequences of the two parties of the role. When the two parties negotiate again, the negotiation does not need to be carried out again, the disclosing can be directly carried out according to the certificate disclosing sequences of the role, the subsequent negotiation of the two parties is shortened, and the certificate collection activities of venomous negotiation adversaries is avoided.

Description

technical field [0001] The invention belongs to the field of trust negotiation in the aspect of network security access control, and in particular relates to a trust negotiation construction method and system based on historical roles. The invention provides users in an open network environment with safe cross-domain resource sharing services. Background technique [0002] Trust negotiation is a new field of network security access control, which aims to provide resource sharing and secure interoperability for users distributed in various security domains. At present, access control systems in a single security domain (including autonomous access control systems, mandatory access control systems, role-based access control systems, etc.) are not suitable for multiple security domains in a distributed environment. Trust negotiation makes up for the shortcomings of single-domain access control systems, and can effectively control and restrict users' access to cross-domain resou...

AI Technical Summary

Problems solved by technology

[0017] The purpose of the present invention is to propose a trust negotiation construction method based on historical roles according to the requirements of automatic trust negotiation on the system. The characteristics of high negotiation efficiency; the present invention also provides a system for realizing the method

Images