A security access system and security access method based on trust token

Abstract

The invention discloses a security access system based on a trust token and a security access method thereof. The system includes a requester, a transmission channel, and a server; the server also includes a token seed management unit, a certificate management unit, an asymmetric Encryption and decryption unit, symmetric encryption and decryption unit, hash operation unit, input and output interface, stateless prediction unit, buffer unit, connection management unit; token seed management unit periodically generates global random numbers as token seeds; certificate management The unit stores the digital certificate and private key of the service party; the stateless pre-judgment unit does not store any requester information, and uses computational difficulties to filter access messages; the buffer unit uses the cached information to prevent tokens from being reused; the connection management unit uses strong identity Authentication is used to confirm the identity of the requesting party and form a shared secret key; the asymmetric encryption and decryption unit, symmetric encryption and decryption unit, and hash operation unit complete the corresponding mathematical operations, and the input and output interfaces complete message sending and receiving.

Description

technical field [0001] The invention relates to a system and method for mutual authentication and connection establishment between a service party and a service requester in the field of network communication, in particular to a trust token-based secure access system and a secure access method thereof. Background technique [0002] With the rapid development of emerging networks such as the Internet, the Internet of Things, and the Ubiquitous Network, the scale of the network is developing explosively. The scale of DoS and DDoS attacks is increasing, and the network security situation is becoming increasingly severe. At present, the cost of relying on passive methods such as feature detection and traffic filtering to resist risk factors is increasing, and it is difficult to hold accountable for the traffic of non-secure connections. Existing networks should give more consideration to controlling malicious network traffic at the source, associating traffic and connections wit...

AI Technical Summary

Problems solved by technology

[0004] Purpose of the invention: the present invention provides a secure access system and method based on trust tokens, which overcomes the lack of strong authentication and continuity support in the prior art, which easily becomes an access bottleneck and causes the client to be killed by mistake. The use of the present invention The progressive relationship of the trust level gradually completes the mutual authentication of the requester and the server, increases the difficulty of denial of service attacks against the server, and finally ensures that the requester and the server establish a secure trust connection

Images