Certificate-free remote anonymous authentication method based on third party in cloud application

Abstract

The invention discloses a certificate-free remote anonymous authentication method based on a third party in a cloud application, and the method mainly solves the problem that remote bidirectional authentication in the prior art is poor in safety. The method is achieved through the steps that (1) a network manager M initializes a system; (2) the network manager M conducts identity register on a user U, and issues a system account to the user U; (3) the network manager conducts identity register on a service provider S, and sends part of the identity information of the legitimate user U to the service provider S; (4) the user U sends a service request to the service provider S in an anonymous mode through the system account; (5) the service provider S and the user U conduct bidirectional authentication. According to the method, the requirement for a certificate is omitted, the defects of secret key trusteeship are omitted as well, safety in anonymous bidirectional authentication is improved, and the method can be used for identity authentication when a remote user in a wireless body area network conducts service request.

Description

technical field [0001] The invention belongs to the technical field of information security, in particular to a certificateless remote anonymous authentication method, which can be used for remote user identity authentication in a wireless body area network (WBAN). Background technique [0002] Cloud computing is one of the research hotspots in the IT field at present, and is considered to be the fourth generation of IT industrial revolution after the Internet. Cloud computing is based on the Internet and distributed computing technology. It integrates originally independent and scattered resources such as computing, storage and bandwidth to form a resource pool, and shields users from details such as storage hardware configuration, distributed processing, disaster recovery and backup. Provide storage resources as a service to users through the Internet. Users rent resources in the pool from cloud service providers according to their actual demand for storage resources, and...

AI Technical Summary

Problems solved by technology

Although this method solves the problem of key escrow, it still has high computational complexity, cannot achieve complete anonymity, and cannot resist public key replacement attacks and does not consider the limited storage space of users.

Images