A blockchain-based cross-domain authentication method and electronic equipment

Abstract

Embodiments of the present invention provide a block chain-based cross-domain authentication method and electronic equipment, which are implemented based on a given cross-domain authentication system. The given cross-domain authentication system includes a master certification authority, a slave certification authority, a client, and a verification party. Wherein the method includes: the master certification authority generates public parameters, a master key and a master public key, and generates and distributes the slave key of the slave certification authority to the slave certification authority based on the master key; the slave certification authority issues a certificate according to the slave key To the client, if the client verifies that it is valid, it will accept it; from the certification authority, the certificate will be promised and sent to the client, and the client will accept it if it is verified to be valid; from the certification authority, the commitment will be signed and broadcast to the blockchain system. If the certification body verifies that the signature is valid, it stores it; the client sends the commitment and verification information to the verifier, and the verifier accepts the user's identity information if the verification promise is valid. The embodiment of the present invention can realize efficient cross-domain authentication and can strictly supervise the authentication authority.

Description

technical field [0001] The present invention relates to the technical field of information security, and more specifically, to a blockchain-based cross-domain authentication method and electronic equipment. Background technique [0002] The Internet is an open system, and its openness leads to many security loopholes, threats and privacy issues. All kinds of resources in the network are easy to be illegally accessed by attackers and cause economic losses and other problems. Therefore, it is very important for information service providers to verify the legality of network resource visitors. [0003] Identity authentication is the process of determining the validity of the identity of an information service entity, which is a basic line of defense for network security. Due to the increasing number of information service resources and types of information services, users need to log in to different information service systems to complete different tasks. These information se...

AI Technical Summary

Problems solved by technology

[0007] However, due to the above limitations of the traditional identity authentication technology, it obviously cannot meet the efficiency requirements in this new scenario, and at the same time, the security and fairness of the authentication process cannot be guaranteed.

Images