KeyNote trust management system and management method thereof
A technology of trust management and credential, which is applied in the fields of electrical digital data processing, instruments, computer security devices, etc., and can solve the problems of lack of network address calculation support, inability to accurately prohibit special requests, and lack of further improvement.
Inactive Publication Date: 2012-10-31
TIANJIN UNIV
View PDF0 Cites 1 Cited by
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
[0005] However, the current implementation of the KeyNote trust management system is only a prototype system, that is, it only provides the most important functions required by the system, but it has not been further improved. It only provides four simple command line operations for digital signature generation and signature verification. , key generation and policy calculation, there are still many places that need to be expanded and improved in actual system integration
For example, the existing KeyNote trust management system does not provide support for network address calculations, the writing format of policies and credentials is single, and special requests cannot be accurately prohibited. Therefore, for the application of the KeyNote trust management system in actual network communication, we A safer and more efficient model is proposed
Method used
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View moreImage
Smart Image Click on the blue labels to locate them in the text.
Smart ImageViewing Examples
Examples
Experimental program
Comparison scheme
Effect test
Embodiment Construction
[0032] The specific implementation, structure, features and effects provided by the present invention will be described in detail below in conjunction with the accompanying drawings and preferred embodiments.
[0033] For the above-mentioned purpose and goal, the present invention proposes corresponding solutions for various defects in the prior art, and there are 3 parts in total, namely, the KeyNote trust management system after adding the cache, the method for preventing and detecting Dos, and adding about bits in the source code. function of the operation. Its specific technical scheme is as follows:
[0034]1. Construction of statement cache: The KeyNote trust management system of the present invention adds a module as a statement cache area on the basis of the KeyNote prototype system, which is used to store the recently frequently accessed credential statements, so that it is not necessary to store them every time. uploaded. When KeyNote wants to load the credential, ...
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More PUM
Login to View More Abstract
The invention discloses a KeyNote trust management system. The KeyNote trust management system comprises a credential set, an action request, a credential verifying module, a trust management engine module, a system invoking module and an application and local policy library and further comprises a trust statement caching module, wherein the credential set and the action request are taken as input data of the KeyNote trust management system; and the trust statement caching module is used for storing a credential which is frequently accessed recently. A management method thereof comprises the following steps: when the KeyNote trust management system wants to load the credential, checking whether a required credential statement exists in a cache region; and if not, loading the required credential statement from an external storage device. Compared with the prior art, through the improvement on the KeyNote trust management system, the KeyNote trust management is applied to an actual system more safely, efficiently and reliably, so that the flexibility and safety of the whole KeyNote trust management system are greatly improved.
Description
technical field [0001] The invention relates to the technical field of software safety, in particular to an extended realization method of a computer authentication and authorization mechanism. Background technique [0002] With the development of the Internet, Internet-based distributed applications have also developed rapidly, such as e-commerce, remote resource sharing, active networks, IPSEC, etc., and many new open large-scale distributed systems have emerged. In these distributed systems, there are a large number of computing entities, and the interaction between entities is very frequent. Access control mechanisms are required to ensure entity security. [0003] The traditional authentication and authorization mechanism separates authentication and authorization. The system first authenticates the identity of the requester, and then grants the corresponding authority. In these distributed systems, there are a large number of computing entities, frequent interactions ...
Claims
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More Application Information
Patent Timeline
Login to View More Patent Type & Authority Applications(China)
IPC IPC(8): G06F21/22
Inventor 徐瑞许光全孟灵灵李晓红孙达志
Owner TIANJIN UNIV