Distributed trusted identity authentication method and system, storage medium and terminal

Abstract

The invention belongs to the technical field of cloud computing trusted identity authentication, and discloses a distributed trusted identity authentication method and a system, a storage medium and aterminal, a certificate management system and a certificate release system in the identity authentication system are decoupled, a blockchain account book is used for replacing a certificate release and revocation list and a distributed certificate validity query service, and a single-point fault of a centralized authentication server is avoided; a blockchain structure suitable for a distributed trusted identity authentication system is designed, a digital certificate and an operation type are stored in a block, and malicious nodes are prevented from tampering certificate content and validity;by aiming at the blockchain certificate validity quick query method, a filter bucket is dynamically maintained by adopting double cuckoo filters, so that the certificate query speed is increased, and the block-by-block query efficiency of the blockchain is prevented from being low. The certificate issuing function of the distributed trusted identity authentication system is issued to each participation node of the system, the digital certificates and effectiveness are stored in a distributed mode, and high availability of the identity authentication system is guaranteed.

Description

technical field [0001] The invention belongs to the technical field of cloud computing trusted identity authentication, and in particular relates to a distributed trusted identity authentication method, system, storage medium and terminal. Background technique [0002] At present, cloud computing is the basic support of key national industries such as smart cities, finance and military, and medical education. Cloud computing identity authentication is the process for cloud computing service providers to verify the identity of service users. In the digital world of the Internet, users have a The digital identity represented by group-specific data, and the service provider also authenticates and authorizes this digital identity. How to securely and credibly authenticate and authorize user identities in the network has become an important bottleneck restricting its large-scale development. [0003] At present, the commonly used existing technologies in the industry include: (1)...

AI Technical Summary

Problems solved by technology

[0005] (1) Users often use weak passwords such as phone numbers and birthdays as their static passwords, which are easy to be cracked by attackers, and static passwords will also face threats such as leakage, interception, man-in-the-middle attacks, and brute force cracking, with low security

[0006] (2) Since the mobile phone verification code is provided by the operator, there is a risk of being stolen by hackers; the digital certificate USBKey relies on a centralized third-party CA server to provide services, and a single point of failure will cause the identity authentication service to fail

[0007] (3) The biometric identification method technology is not yet fully mature, and once the biometric information is stolen in database storage or network transmission, the attacker can perform some kind of identity deception attack, and the attack object will involve all information device

[0008] The difficulty of solving the above problems and defects is: the existing identity authentication is a centralized service provider model, and digital certificates are issued and revoked through the abolition list, but such centralized certificate issuance systems are vulnerable to attacks and lead to single point failures The problem that the entire identity authentication system cannot correctly verify the validity of the certificate, and querying the validity of the certificate through the Internet will also bring additional time overhead and security issues such as man-in-the-middle attacks

Images