Authentication System for Distributed Storage

Abstract

The invention provides an authentication system suitable for distributed storage. The authentication system comprises a login module, a registration module, an authentication module and a storage module, wherein the login module is used for sending a registration request and a login request, and calculating authentication question information through a login secret key to obtain the authentication calculation result, the registration module is used for receiving the registration request, detecting whether a user exists, generating fragmentation information, and distributing and storing the fragmentation information into the storage module, the fragmentation information comprises the authentication question information and authentication answer information, the authentication module is used for receiving the login request, searching for storage nodes, obtaining the fragmentation information, sending the authentication question information, receiving the authentication calculation result, comparing the authentication calculation result with the authentication result information to obtain the authentication result, and sending the authentication result to the login module, and the storage module comprises the storage nodes and is used for storing the fragmentation information into the storage nodes and returning the fragmentation information to the authentication module. According to the authentication system, the fragmentation information high in independence is distributed and stored in the different nodes, information exchange of the minimum degree is just carried out between the modules, and the system has the advantages of being high in safety and fault tolerance.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to an authentication system suitable for distributed storage. Background technique [0002] At present, password-based authentication is one of the most popular authentication methods used to solve the system's confidentiality and security issues. In the traditional password-based authentication scheme model, in order to apply for resources, the user first sends a request message to the remote server, which includes the user's ID and the hashed password value. After receiving the request, the remote server searches the access list in the local database to see if there is a pair that matches the request submitted by the user. If it exists, the server will grant the user ID access rights, otherwise it will deny access. [0003] Existing authentication methods and systems mostly use centralized storage solutions. Usually, the user's authentication information (usually a passw...

AI Technical Summary

Problems solved by technology

Some solutions can defend against attacks such as "credential stuffing" to a certain extent through "salting" and other encryption methods, but they do not solve the disadvantages of leaking secrets once the hash value on the server side is obtained

Images