General identifier representation method for identifier password updating and revoking

Abstract

The invention provides a general identifier representation method for identifier password updating and revocation. The method comprises the following identification forms: identifier password identifier = body identifier + aging identifier + version number, time efficiency identifier = time slice level + time slice serial number, wherein the identifier password identifier is composed of the body identifier, the time efficiency identifier and the version number; the time efficiency identifier consists of the time slice level and the time slice serial number, and the time efficiency is used forperiodically updating the identifier; the version number is used for revoking the identifier in the validity period, and the version number is accumulated from 0 to top; the time efficiency identifieradopts a form of an effective time slice grade and an effective time slice serial number, along with the improvement of the time slice level, the time length represented by the time slice is increased exponentially, and the time slices of all levels adopt the same starting time. According to the relation between secret key updating and secret key revocation in the identification password system,the characteristics of the layered identifier password system are combined, and secret key revocation comprises two parts of revocation when a secret key expires and active application revocation before the secret key expires.

Description

technical field

[0001] The invention relates to the technical field of network security, in particular to a general identification representation method for identification password update revocation.

[0002] technical background

[0003] In the actual application environment of the identification cryptography system, since the user key in the identification cryptography system is directly obtained from the user's identification, and usually, the user's identification is fixed, but when the user needs to update the key (key Key leakage or active application for key replacement), how to ensure the consistency of identification and key update is an open problem.

[0004] Identity key revocation: The user identity in the identity cryptosystem is the user’s key, and revocation of the user key means that the user identity is also invalid. However, in actual usage scenarios, it is usually assumed that the user identity remains unchanged and valid for a long time, but the traditiona...

Images