Cross-domain authentication method based on block chain and electronic equipment

Abstract

The embodiment of the invention provides a cross-domain authentication method based on a block chain and electronic equipment. The method is realized based on a given cross-domain authentication system, the given cross-domain authentication system comprises a master authentication mechanism, a slave authentication mechanism, a client and a verification party, and the method comprises the followingsteps: the master authentication mechanism generates public parameters, a master key and a master public key, and generates and distributes a slave key of the slave authentication mechanism to the slave authentication mechanism based on the master key; the slave certification authority issues a certificate to the user side according to the slave key, and the user side accepts the certificate if verifying that the certificate is valid; the slave certification authority commits the certificate and sends the certificate to the user side, and the user side accepts the certificate if verifying that the certificate is valid; the slave certification authority signs the commitment and broadcasts the commitment to the blockchain system, and other slave certification authorities store the commitment if verifying that the signature is valid; and the user side sends the commitment and the verification information to the verification party, and the verification party accepts the identity information of the user if verifying that the commitment is valid. According to the embodiment of the invention, efficient cross-domain authentication can be realized, and the slave authentication mechanism can be strictly supervised.

Description

technical field [0001] The present invention relates to the technical field of information security, and more specifically, to a blockchain-based cross-domain authentication method and electronic equipment. Background technique [0002] The Internet is an open system, and its openness leads to many security loopholes, threats and privacy issues. All kinds of resources in the network are easy to be illegally accessed by attackers and cause economic losses and other problems. Therefore, it is very important for information service providers to verify the legality of network resource visitors. [0003] Identity authentication is the process of determining the validity of the identity of an information service entity, which is a basic line of defense for network security. Due to the increasing number of information service resources and types of information services, users need to log in to different information service systems to complete different tasks. These information se...

AI Technical Summary

Problems solved by technology

[0007] However, due to the above limitations of the traditional identity authentication technology, it obviously cannot meet the efficiency requirements in this new scenario, and at the same time, the security and fairness of the authentication process cannot be guaranteed.

Images