Cross-domain trust transfer method based on block chain

Abstract

The invention relates to the technical field of block chains and discloses a cross-domain trust transmission method based on a block chain. After a user logs in an original application system and passes original domain authentication, a local domain authentication server issues an alliance token to the user, records an authentication certificate, sends a challenge value to an out-domain authentication server through a confidential channel according to a service demand selected by the user, and returns user successful authentication information. The user can autonomously select and access the out-of-domain application within a period of time. The out-of-domain authentication server performs secondary challenge response on the token held by the user and realizes cross-domain authentication in a block chain checking mode. Trust islands caused by different authentication mechanisms of independent trust systems are broken through, a trust transmission method based on the block chain is provided, endorsement of a central authority is not needed, and a user can log in other applications with the same or lower security level in the alliance only by registering and managing one account password.

Description

technical field [0001] The invention relates to the technical field of block chains, in particular to a block chain-based cross-domain trust transfer method. Background technique [0002] The existing authentication system has the following problems: [0003] (1) Different trust systems form trust "islands". Trust systems in different regions are built independently, and even use different authentication methods. Different trust systems manage different user groups, and it is difficult for different trust systems to communicate with each other. There are problems of redundant construction and waste of resources in different departments and regions. [0004] (2) Poor user experience. User groups in different trust domains cannot authenticate other trust systems across domains. From the user's point of view, there are management problems of multiple account passwords and bad user experience of repeated registration and login, resulting in complicated password management and...

AI Technical Summary

Problems solved by technology

Trust systems in different regions are built independently, and even use different authentication methods. Different trust systems manage different user groups, and it is difficult for different trust systems to communicate with each other. There are problems of redundant construction and waste of resources in different departments and regions.

[0004] (2) Poor user experience

From the user's point of view, there are management problems of multiple account passwords and bad user experience of repeated registration and login, resulting in complicated password management and easy to forget problems.

[0005] (3) Cross-domain authentication security responsibility boundary is not clear

Cross-domain authentication also has security responsibilities while trust is transmitted. Cross-domain users outside the security domain, one-way responsibilities, and simple audits will inevitably lead to implicated security responsibilities, which is not conducive to traceability of certification responsibilities, but also discourages organizations from opening up users outside the domain. Motivation for cross-domain authentication

[0006] (4) Lack of credible trust transfer mechanism

Due to the independent construction of different trust systems, there is no trusted third party to endorse the cross-domain certification of the trust systems of various institutions, and it is also difficult to provide technical support for effective cross-domain certification methods and supervision

[0007] The blockchain is open, transparent and non-tamperable. It can provide trust services without a trusted third party and facilitate the division of responsibilities. It provides an important technical means for cross-domain authentication and helps to solve the cumbersome operations caused by various "trust islands". , low security, unfriendly user experience and other issues

Images