Decentralized Internet-of-Things cross-domain access authorization method and system

Abstract

The invention discloses a decentralized Internet-of-Things cross-domain access authorization method and system, and the method comprises the steps: building a blockchain network after initializing a trust domain system, and setting authentication servers in a plurality of trust domains as blockchain nodes; generating a private key for the equipment in the corresponding domain through the authentication server in each trust domain, and storing the system information of each trust domain in the blockchain; when the equipment authentication server initiates a cross-domain authorization application, enabling the authentication server to perform authorization and threshold signature on the equipment through the intelligent contract; when the equipment performs cross-domain access, performing identity authentication on the equipment through an authentication server in an accessed trust domain; and if the identity verification is passed, querying authorization information of the equipment through the blockchain network, verifying an authorized threshold signature, and allowing the equipment to perform cross-domain access after the signature verification is passed. According to the invention, decentralized cross-domain access authorization of the Internet-of-Things equipment can be realized, and the autonomy and initiative of the trust domain are ensured.

Description

technical field [0001] The present invention relates to the technical field of Internet of Things and network security, in particular to a decentralized Internet of Things cross-domain access authorization method and system. Background technique [0002] At present, the number of global Internet of Things devices is growing rapidly. According to relevant statistics and forecasts, the number of global Internet of Things devices will reach 25.2 billion in 2025. With the rapid development of the Internet of Things, the diversity of Internet of Things applications is brought, and there will inevitably be requirements for cross-domain access, value exchange, and collaborative control between different application systems. For example, the smart bracelet of the smart medical system first needs to be connected to the smart home system to obtain the environmental parameters of the patient's life, thereby providing reference data for the doctor's diagnosis. However, since the smart ...

AI Technical Summary

Problems solved by technology

[0004] However, during the research and practice of the prior art, the inventors of the present invention found that the existing cross-domain authorization technology has the following defects: the centralized architecture is prone to single point of failure, once the central server fails to provide services, Authorization information will not be able to be read; secondly, due to the existence of a trusted third party, the information flow between various application domains becomes more complicated, and maintenance becomes more difficult, resulting in an increase in maintenance costs; in addition, the centralized architecture Rely on the absolute credibility of the third party, and in the current network environment, it is difficult for a certain node to be absolutely credible and safe, resulting in trusted third-party trust issues

Images