A system and method for entity authentication authority management in a satellite communication network

Abstract

The invention relates to an entity authentication authority management system and method in a satellite communication network, belonging to the technical field of authority management and entity authentication in satellite communication. The invention comprises an entity authentication and authority management system and a hierarchical cross-domain dynamic authority attribute collaborative mappingmethod. The entity authentication and authority management system comprises a network node identity authentication module, a user terminal identity authentication module and an authority management module; the network node identity authentication is completed by a main authentication center; the user terminal identity authentication is completed by each domain authentication center; the authoritymanagement module stores the role-authority mapping table of network nodes and user terminals separately in the main authentication center and the domain authentication centers, and obtains the authorities of the nodes or the users through a multi-table jointed querying method. The entity authentication authority management system and method in the satellite communication network can realize large-scale entity identity authentication and authority management; and cross-domain access and secure roaming of user terminals in the satellite communication network are ensured by means of the entityidentity authentication scheme and the hierarchical cross-domain dynamic authority attribute collaborative mapping method.

Description

technical field [0001] The present invention relates to an entity authentication authority management system and method in a satellite communication network, in particular to a new entity authentication authority management system, which adopts a two-level management method to realize the identity authentication of an access entity, and adopts hierarchical cross-domain The method realizes the management of entity rights by means of collaborative mapping of attributes, and belongs to the technical field of rights management and entity authentication in satellite communications. Background technique [0002] With the continuous progress and application of satellite technology and wireless communication technology, as well as the increasingly urgent needs of national security, aerospace, disaster early warning, etc., satellite communication network has developed rapidly as one of the important corresponding technologies. The satellite communication network consists of multiple ...

AI Technical Summary

Problems solved by technology

Autonomous access control determines the access method based on the identity and authorization of the visitor, and the access subject has the right to decide on access control, which is likely to cause security holes in the process of information movement

Mandatory access control means that the system classifies the subject and object, and determines the access mode according to the level, which is too emphasis on confidentiality and is not conducive to management

Role-based access control is an improvement on the former two. It stipulates the user's access rights based on the user's role in the system, which solves the problem of difficult management, but cannot solve the problem of cross-domain access of user terminals.

[0004] Moreover, the functions and management modes of each backbone node and user terminal are completely different, and it is very difficult to carry out unified management

And if the traditional user management method is adopted, billions or even tens of billions of data need to be stored at every turn, and the cost of a comparison of user information is huge, which will inevitably bring a long delay to user authentication

[0005] To sum up, the existing authority management schemes cannot meet the authority management requirements in the satellite communication network

Images