Distributed trusted organization identity access control system and method

Abstract

The invention discloses a distributed trusted organization identity access control system and method, which relate to the technical field of information security, and solve the technical problem of organization identity verification in a business scene of multi-organization cooperation under the condition of not leaking privacy. The system comprises an organization application module, a trusted organization identity server and an identity verification module, wherein the organization application module is used for a user to apply for an organization identity, and an organization administrator allocates the organization identity to the user and generates an attribute private key based on a CP-ABE cryptography algorithm; when the user accesses the third-party application with the organization identity, the identity verification module is used for the third-party application to verify whether the user has the corresponding organization identity, the individual organization identity is verified through the user private key SK, the user does not need to provide any privacy data in the whole verification process, namely, so-called 'zero-knowledge' proof is achieved, And meanwhile, the third-party application system performs authorization and access control according to the access structure, so that the information security is greatly improved.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a distributed trusted organization identity access control system and method. Background technique [0002] In the business scenario of multi-organization collaboration, the identities of all participants need to be trusted, so that the business process is authentic and effective, and the results cannot be denied. Its credible identity is reflected in the credible personal citizenship of the subjects participating in the business, the credible relationship between the individual and the organization, and the credible identity of the organization represented by the individual; [0003] The user and authority management of traditional application systems usually use user names and passwords to verify user identities, and then determine the user's identity in the organization according to the user's role or group, and use this as a basis for authorization and access con...

AI Technical Summary

Problems solved by technology

[0004] In order to solve the problems in the above solution, the present invention provides a distributed trusted organization identity access control system and method, which solves the problem of organization identity verification in the business scenario of multi-organization cooperation without leaking privacy

Images