Information service entity identity management system and quick identity revocation method

Abstract

The invention discloses an information service entity identity management system and a quick identity revocation method, which can solve the problem of instant revocation of an entity identity. A keyrevocation module is added in an identity management system, and the key revocation module includes a security arbitration unit, which can quickly revoke the identity of an information service entitywhen services of the information service entity are invalid or illegal. The implementation of the quick revocation method includes the following steps that: system initialization is performed, and keygeneration and segmentation of the information service entity is performed; and the information service entity and the security arbitration unit cooperate with part of private keys to implement the signature of a message, and a verification server verifies the signature of the message to achieve the unified management and authentication of a network space information service entity identity. According to the scheme of the invention, the invalid or illegal identity can be quickly revoked, the computational security is based on the difficulty of solving discrete logarithms on elliptic curves, the characteristic of quick revocation can be realized, high security can also be achieved, and the scheme is suitable for network environments with high security requirements.

Description

technical field [0001] The invention belongs to the technical field of information security, and mainly relates to the identity management of information service entities, in particular to an information service entity identity management system and a rapid identification revocation method, which can be used for quality monitoring of information services. Background technique [0002] In view of the current Internet environment, the characteristics of diverse types of information services, overlapping service content boundaries, multi-mode service formats, and dynamic service cycles, as well as the lack of management and verification mechanisms for information services, poor behavior supervision and traceability, etc. , the unified management of the identity of information service entities has become the technical guarantee for the credibility of information services in cyberspace. How to realize the unified management requirements of diverse network information service labe...

AI Technical Summary

Problems solved by technology

However, in this scheme, SEM needs to repeatedly verify the message and user in each signature operation, which makes the calculation too complicated, and the scheme only proves the security against internal attacks, which is a weak semantic security concept

[0005] Currently, existing identity management systems cannot quickly revoke invalid or illegal identities. The commonly used revocation technology is to attach the validity period of the identity to the public key of the entity, which not only needs to know the expiry date of the validity period in advance, but also does not have real-time

Although a fast revocation scheme based on arbitration has been proposed, it has not been used in the identity management system, and the existing fast revocation scheme still has certain defects in security and calculation

Images