A double-agent cross-domain authentication method based on identification password and alliance chain

Abstract

The invention relates to a double-agent cross-domain authentication method based on an identification password and an alliance chain, and belongs to the technical field of Internet of Things information security. The method comprises the following steps: 1) management domain system initialization: a KGC server initializes a system parameter group, generates a system master key, sends an information chaining request and attaches a management domain identifier, the system parameter group and the system master key; the BCAS server stores the information in a file and calculates file hash; calls an information chaining intelligent contract, and writes the URI and the Hash information of the file into a block chain; and 2) the entity EA in the management domain A is authenticated by the entityEB in the management domain B. According to the method, the identification signature technology is used for achieving entity identity authentication, the authentication process does not depend on public key infrastructure and does not need a digital certificate, and the system is easy and convenient to deploy and maintain, easy to expand and high in flexibility; the mutual trust construction process between the management domains does not depend on a third-party mechanism; and the revocation and updating problems of the identification password technology public key can be effectively solved.

Description

technical field [0001] The invention relates to a double-agent cross-domain authentication method based on an identification password and an alliance chain, which is used for identity confirmation before an entity requests a cross-domain entity service or accesses a cross-domain entity resource, and belongs to the technical field of Internet of Things information security. Background technique [0002] Identity authentication is a very basic technology in IoT scenarios, and it usually exists as the underlying technology for privacy, security, trust, authorization, access control, etc., or as a submodule of most applications. Before an entity requests services and accesses network resources, it usually needs to be authenticated by the relevant identity authentication module, and the next step of network behavior can only be entered after the identity is confirmed. [0003] From the key types used in the identity authentication process, identity authentication technologies can...

AI Technical Summary

Problems solved by technology

The identity authentication technology based on the public key can solve the scalability and flexibility problems faced by the symmetric key, but the identity authentication technology based on the digital certificate has the dependence on the public key infrastructure and the maintenance problem of the digital certificate, which makes it in Applications in the IoT space are limited

Images