A method and system for SSH secret key management

Abstract

A method for managing SSH secret key includes collecting host public key information, client public key information and IP information of SSH remote host through monitoring module of SSH remote host and reporting them to SSH secret key management center for publicity. 2) verifying the host public key fingerprint of the SSH remote host uploaded to the SSH secret key management center when the client accesses the SSH remote host according to the publicity through the notarization and early warning module of the SSH secret key management center; 3) if the host public key fingerprint passes the verification, further verifying the client public key information and the IP information upload to the SSH secret key management center when the client accesses the SSH remote host according to the notarization and early war module, and if the host public key fingerprint fails the verification, sending a warning to the client and denying access; 4) if the client public key information and the IP information pass further verification, allowing the access; if the client public key information and the IP information fail to pass, denying the access. The method can effectively improve the security of the SSH remote connection.

Description

technical field [0001] The present invention relates to the communication field, and more particularly relates to a method and system for SSH key management. Background technique [0002] The SSH protocol is the abbreviation of Secure Shell (secure shell), customized by the Network Working Group of the IETF. SSH is a security protocol based on the application layer and the transport layer. It is currently reliable and designed for remote login. A protocol that provides security for sessions and other network services. The traditional network service program does not consider the security mechanism in the transmission mechanism and implementation principle, but only uses a simple security verification method, so the data transmitted between the user and the server is easily attacked by network hackers. In order to ensure data security, SSH has gradually replaced traditional network service programs with its more secure features. [0003] Currently, there are two ways for SS...

AI Technical Summary

Problems solved by technology

[0004] However, these two security authentication methods cannot effectively prevent "man-in-the-middle" attacks, and cannot manage the secret key reasonably, and cannot effectively replace the secret key in time to ensure the security of the secret key

Images