A kind of upki joint public key authentication method and system

Abstract

The invention relates to a uPKI joint public key authentication method and system. The authentication method includes the following steps: a group administrator in a distributed network initiates a vote and selects a certain number of witness nodes; the group administrator uses the private key of the authorized account to The public key signature of the selected witness node is saved as an authorized signature; when an institutional node wants to join the distributed network, the interested witness nodes will compete for the certification authority of the institutional node, and the winning witness node will conduct a verification of the institutional node. Authentication, and issue a CA certificate to the organization node; the organization node provides identity proof to join the distributed network through the CA certificate, and the CA certificate is jointly certified by a certain number of witness nodes. The present invention has the following effects: the levels of CA digital certification centers are flat and completely independent of each other; the validity and authenticity of CA certificates are jointly guaranteed by multiple CA digital certification centers; the trust centralization existing in existing PKI is avoided question.

Description

technical field [0001] The invention relates to the technical field of network information security, in particular to a uPKI combined public key authentication method and system. Background technique [0002] PKI (Public Key Infrastructure) is a universal technical specification and standard that implements and provides security services. It is a system that manages keys and confirmation information of asymmetric encryption algorithms, and integrates digital certificates, public key encryption technology and CA. PKI combines software, encryption technology, and services that organizations need to implement asymmetric encryption algorithms. [0003] PKI is a key management platform that follows established standards. It uses cryptographic services such as "information encryption" and "digital signature" and the necessary key and certificate management systems to achieve network communication confidentiality, integrity and non-repudiation. A complete, mature and reliable solu...

AI Technical Summary

Problems solved by technology

[0010] The existing PKI has the problem of trust centralization. The validity and authenticity of the CA certificate are completely guaranteed by its direct issuer (CA digital certification center), and all other CA digital certification centers can no longer provide further information on this certificate. ensure

Since the CA digital certification center has different levels, the trustworthiness of the lower-level CA digital certification center is more difficult to guarantee

Images