Trust service adaptation method based on security agent

Abstract

The invention discloses a trust service adaptation method based on a security agent, which comprises a service adapter and a security agent, and each service producer and each service consumer comprise one security agent. According to the invention, the registered trust service is recorded, monitored and managed through the service adapter, the service consumer does not need to maintain the specific information of the service, directly obtains the target service information from the service adapter through the security agent and initiates access, and automatically redirects the service information under the condition that the service parameters are changed, thereby improving the adaptability and dynamic expansibility of the service. The method supports dynamic adaptation of services. According to the method, the unified interaction among the service adapter, the service producer and the service consumer is realized and simplified, the operation details of the interaction process are shielded, the convenience and availability of service adaptation are improved, and the consistency of a service system in a system is supported.

Description

technical field [0001] The invention relates to a security agent-based trust service adaptation method. Background technique [0002] In the current network environment, entities active in the network may be attackers and security threats. Identity authorization management and identity authentication for entities such as users, devices, applications, files, and network resources are usually based on digital certificates. way to provide trusted services. In the construction of an industry network trust system, each trust-related system is deployed independently to provide services, and the combination of different services together forms a complete authentication and authorization system, and there are more and more scenarios for forming a distributed service system. Faced with different trust services, there are generally differences in the implementation methods, protocols, and parameters of these services. As a client requesting these services, you first need to set the a...

AI Technical Summary

Problems solved by technology

[0003] In this way, there are several main problems. One is that when the service address, port and other service information changes, the requesting party cannot actively know and adjust the request parameters at the first time, and falls into a cycle of continuous retries, or passively passes Modify the configuration parameters and code to relocate the service, and the service configuration and scalability are poor

The second is that when a single service node is disconnected, the service request will fail. For the case of hot standby, the client needs to maintain multiple service information, and at the same time use the polling method until a normal active service is obtained. This method is more efficient Low

The third is that the request data exchange between the client and the server in the traditional method lacks security measures, lacks the identity authentication process and data protection means between service provision and invocation

Images