Cross-trust-domain identity authentication method

Abstract

The invention discloses a cross-trust-domain identity authentication method. An identity authentication service module and an authentication terminal module are involved in the method. The identity authentication service module provides an issuing service and a verification service for an identity token, the issuing service of the identity token includes the steps of accepting the application for the identity token, packaging the identity token and issuing the identity token, and the verification service of the identity token includes the steps of verifying the identity token based on a challenge, returning user application system information depending on a valid token and excluding identity tokens of non-valid users through synchronization with an LDAP or a CRL. The authentication terminal module comprises an identity token application module and a client side password module. The identity token application module is in charge of identity token application and maintenance, and the client side password module provides a client side certification and password operation. A user can have access to a whole network through identity authentication at one place, and the trust problem existing in the prior is solved.

Description

technical field [0001] The invention relates to the technical field of identity authentication in an information network, in particular to an identity authentication method across trust domains, which realizes access within a trust domain or across trust domains through an identity authentication token. Background technique [0002] At present, in the large network environment of government affairs and business groups, there are many times when different networks use different trust systems, such as different CAs and different business systems. The mechanism requires multiple authentications in each subnet, and there is a large information barrier, which is inconvenient for information sharing and interaction between subnets. Contents of the invention [0003] In order to overcome the above-mentioned shortcomings of the prior art, the present invention provides a cross-trust domain identity authentication method, which realizes one-site authentication and whole-network acc...

AI Technical Summary

Problems solved by technology

[0002] At present, in the large network environment of government affairs, business and other groups, there are many times when different networks use different trust systems, such as different CAs and different business systems. When exc

Images