Personal authorization access control system based on national cryptographic algorithm

Abstract

The invention provides a personal authorization access control system based on a national cryptographic algorithm. The system comprises the following modules. The system comprises a user management module, an authorization strategy management module, a client management module, a user authentication module and an authority judgment module. According to the personal authorization access control system based on the national cryptographic algorithm, a policy-based access control (PBAC) mode is used for controlling user resource permission, and compared with traditional role (RBAC)-based access control, the personal authorization access control system based on the national cryptographic algorithm has more flexible control capability and realizes permission control of different granularities. Compared with the traditional international universal algorithms RSA, SHA and DES, the SM2, SM3 and SM4 algorithms used in the invention have the advantages of lower resource consumption, higher security and higher performance.

Description

technical field [0001] The invention specifically relates to a personal authorization access control system based on a national secret algorithm. Background technique [0002] With the continuous development of IT technology, the microservice architecture is more and more widely used, and has become a technical architecture commonly used in Internet and enterprise-level projects. By dividing different business fields, several relatively independent subsystems in a project are used as An independent service is provided, which makes it necessary to frequently call multiple microservices to complete some complex services. Authentication is indispensable in each service call process. How to ensure frequent authentication when a large number of users access concurrently? It is the primary problem faced by the microservice security architecture that the authority will not become the bottleneck of the whole system. Similarly, in today’s Internet of Everything, the demand for infor...

AI Technical Summary

Problems solved by technology

This method solves the problem of authentication between services within the enterprise, but it is impossible for the enterprise to open such important shared storage to external enterprises, so it obviously does not support the safe sharing of data between enterprises.

[0005] ②Client token, the client requests to generate a token from the ID card authentication server, and the identity authentication server signs the token with the RSA algorithm, and then attaches the token when the client accesses other services. This method solves the identity problem Authentication issues, security is good, and it can also support safe data sharing between cross-enterprise services. However, with the development of cryptography and computer technology, the 1024-bit RSA algorithm has been proven to be at risk of being cracked. , memory and other requirements are high, performance is not high

Images