WebService security certification access control method based on software digital certificate and timestamp

Abstract

The invention discloses a WebService security certification access control method based on a software digital certificate and a timestamp. The method specifically comprises the steps of (1) generating a client credit certificate through a WebService client; (2) creating a WebService request through the client, and signing the WebService request data through a device certificate; (3) calling the timestamp through the client, acquiring stand time from a time source through a timestamp server, and signing and issuing the timestamp to the WebService data through a timestamp server private key; (4) sending the original request text, the device certificate of the WebService client, a signature message and the timestamp information to the server side by the client through a WebService interface after packaging; (5) receiving the WebService request through the server side, sequentially verifying the client device certificate, the digital signature data and the timestamp information, then processing the WebService request, and returning the processing result to the WebService client. With the adoption of the method, the credible access control certification can be performed for all WebService services; in addition, the validity of the request can be determined through the time, and the time can be accessed.

Description

technical field [0001] The invention belongs to the technical field of computer and information security, and in particular relates to authentication of a Web Service server to a client and time access control technology. Background technique [0002] WebService has become the mainstream means of network interface services today, and security has always been concerned. WebService itself also has access authentication. There are currently several authentication methods: [0003] (1) Use the username and password method. Although this method is simple and easy to implement, it is weak in security, user name and password are easy to be stolen, and password-based access requires regular key replacement, which has a serious impact on security and ease of use. the [0004] (2) Although the certificate authentication that comes with WebService can use certificates, the scalability is not strong, SM2 certificates based on national secret algorithms cannot be used, and time authent...

AI Technical Summary

Problems solved by technology

[0006] Aiming at the problems existing in the existing WebService access authentication, the object of the present invention is to provide a WebService unique authentication method based on software digital certificates and time stamps. The method uses software methods to realize application server authentication client and access control, effectively Solve the problem of convenient security authentication and access control from the WebService server to the client

Images