Check patentability & draft patents in minutes with Patsnap Eureka AI!

Multi-CA cross-domain authentication method based on block chain in dispersed autonomous network

An independent network and authentication method technology, applied in the field of multi-CA cross-domain authentication based on blockchain, can solve flooding attacks, increase authentication overhead and other problems, achieve stable concurrency performance, speed up query speed, and good certificate query performance Effect

Pending Publication Date: 2021-09-03
BEIJING UNIV OF POSTS & TELECOMM
View PDF2 Cites 1 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

Technical solution 2 realizes the cross-domain authentication of telemedicine equipment through the alliance chain, but the cross-domain authentication proxy server of the hospital domain H does not verify the identity of the device before initiating an identity certificate query to the blockchain, which is prone to flooding attacks, and every time Cross-domain access requires cross-domain authentication, which increases authentication overhead

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Multi-CA cross-domain authentication method based on block chain in dispersed autonomous network
  • Multi-CA cross-domain authentication method based on block chain in dispersed autonomous network
  • Multi-CA cross-domain authentication method based on block chain in dispersed autonomous network

Examples

Experimental program
Comparison scheme
Effect test

Embodiment 1

[0060] Embodiment 1 Establishment of cross-domain authentication architecture

[0061] In order to meet the cross-domain authentication requirements of a large number of devices in the decentralized autonomous network, the present invention proposes a blockchain-based multi-CA cross-domain authentication architecture. The overall architecture is as follows: figure 1 As shown, the architecture consists of a consortium chain and multiple domains.

[0062] Each domain has its own CA server, network equipment, physical equipment, etc., and the CA server can use the original authentication method to authenticate members in the domain. There is also a server (Member authentication and management server MAMS) with member authentication and management functions in each domain. MAMS is responsible for authentication interaction with the CA server, and is also responsible for cross-domain authentication interaction with the alliance chain. The identity authentication algorithm uses inte...

Embodiment 2

[0064] Example 2 Intra-domain certificate life cycle

[0065] The blockchain-based multi-CA cross-domain authentication is compatible with the original CA authentication. The life cycle of the certificate in the authentication mechanism includes the issuance, renewal, and revocation of the certificate. The following process description takes the device Da in the organization Org1 to apply to join the domain A as an example, and introduces them respectively. The issuance, renewal and revocation process of certificates in the domain. The description of the symbols is shown in Table 1.

[0066] Table 1 Description of certificate life cycle symbols

[0067]

[0068] release:

[0069] The procedure for applying for a certificate and issuing a certificate for device Da in Org1 is as follows:

[0070] 1) Step 1: Da → MAMS_A: {app_for_cert(Da, Org1, PK UA )}: Device Da in organization 1 generates a public-private key pair PK UA 、PK RA , and send a certificate request to the m...

Embodiment 3

[0088] Embodiment 3 Cross-domain authentication method

[0089] Based on the above introduction of multi-CA cross-domain authentication architecture and CA certificate life cycle, we propose a blockchain-based cross-domain authentication method. Take device D in domain A A Access device D in domain B B As an example to introduce the cross-domain authentication scheme, the cross-domain authentication process is as follows: figure 2 As shown, the device in domain A has the certificate Cert_A. The specific cross-domain authentication process is as follows:

[0090] First, device D in domain A A To device D in domain B B Send a connection request, D B Query device D to MAMS_B A authentication information, if the query has no result, the connection will be rejected and the information of MAMS_B will be returned to D A . D. A Send a cross-domain authentication request to MAMS_B, MAMS_B generates a random number N after receiving the request and returns it to device D A ,D...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention discloses a multi-CA cross-domain authentication method based on a block chain in a decentralized autonomous network, a multi-CA cross-domain authentication architecture composed of an alliance chain and a plurality of domains is adopted, each domain is provided with a CA server, a network device, a physical device and an MAMS, the MAMS can perform authentication interaction with the CA server and cross-domain authentication interaction with the alliance chain, an authentication node of the alliance chain is a CA server in each domain and is used for maintaining certificate information and a state account book of all the devices joining the alliance chain. The block account book only records the Hash value of the certificate, the certificate state and the belonging CA, a plurality of authentication transactions form a block, and a plurality of block chains form a block chain. A certificate is stored in a database of the certificate by a CA server issuing the certificate, meanwhile, each authentication node maintains a block chain account book copy and an account book world state database, and block account book information can be quickly obtained by querying the state database. According to the method, the authentication efficiency and security are improved, and the storage overhead is reduced.

Description

technical field [0001] The invention relates to the technical field of computer network security, in particular to a block chain-based multi-CA cross-domain authentication method in a decentralized autonomous network. Background technique [0002] In recent years, the commercial deployment of 5G has been gradually carried out in major countries in the world. It is estimated that the total number of 5G connections will reach 1.8 billion by 2025. At the same time, there have been significant improvements in network delay, mobility, and data rate. The advancement of network technology has brought opportunities for the development of smart terminals, which can access the network at any time and communicate with other devices. We call the network space composed of intelligent terminals a decentralized autonomous network. One of its characteristics is its wide network coverage, and its other characteristic is its strong mobility and high interconnection requirements. When meetin...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
IPC IPC(8): G06F21/44G06F21/45G06F21/60G06F16/27
CPCG06F21/44G06F21/45G06F21/602G06F16/27
Inventor 芮兰兰杨杨王苗苗高志鹏李文璟
Owner BEIJING UNIV OF POSTS & TELECOMM
Features
  • R&D
  • Intellectual Property
  • Life Sciences
  • Materials
  • Tech Scout
Why Patsnap Eureka
  • Unparalleled Data Quality
  • Higher Quality Content
  • 60% Fewer Hallucinations
Social media
Patsnap Eureka Blog
Learn More