Security authentication and authorization control method, control system and program storage medium

Abstract

The invention belongs to the technical field of communication network security, and discloses a security authentication and authorization control method, a control system and a program storage medium. After a user completes registration and binding with an electronic credential service device, an electronic credential authentication service submits user authentication information to the electronic credential service device, and generates a user service authentication code. Immediately, the electronic credential service equipment completes agreement of the proxy signature right and the signature key with the electronic credential authentication service equipment. After the user completes authentication interaction with the electronic credential service equipment, the user obtains the token with the proxy signature, and then authentication access to other services of the electronic credential can be achieved by adding the token into the data packet. The electronic credential may perform signature verification or batch verification on the token according to other services. For the agency signer with violation, privacy revocation can be realized and the abuse behavior can be graded, so that the abuse behavior of the agency signer can be further corrected.

Description

technical field [0001] The invention belongs to the technical field of communication network security, and in particular relates to a security authentication and authorization control method, a control system, and a program storage medium. Background technique [0002] With the continuous development of e-commerce and the advent of the era of paperless bills, electronic certificates have become an indispensable part of people's daily life. In 2015, the State Administration of Taxation promulgated the "Announcement on Relevant Issues Concerning the Comprehensive Implementation of the Upgraded Value-Added Tax Invoice System" requiring the full implementation of the upgraded version of the Value-Added Tax Invoice System nationwide. my country's "Thirteenth Five-Year Plan for National Economic and Social Development" also clearly states "promoting electronic invoices". Existing paper invoices have problems such as low efficiency, high cost, high management risk, poor user exper...

AI Technical Summary

Problems solved by technology

[0008] (1) Today's network is open, and the data on it is at risk of being intercepted, tampered with, replayed, and blocked by attackers, and there are few security authentication methods for electronic credential service-related fields

Images