A Distributed Trusted Organization Identity Access Control System and Method

Abstract

The invention discloses a distributed trusted organization identity access control system and method, relates to the technical field of information security, and solves the technical problem of organization identity verification in the business scenario of multi-organization cooperation without leaking privacy; including Organization application module, trusted organization identity server and identity verification module. The organization application module is used for users to apply for organization identity. The administrator of the organization assigns the organization identity to the user and generates the attribute private key based on the CP‑ABE cryptographic algorithm; when the user uses When an organization identity accesses a third-party application, the identity verification module is used by the third-party application to verify whether the user has the corresponding organization identity. The present invention verifies the individual organization identity through the user's private key SK. "Zero-knowledge" proof, and the third-party application system authorizes and controls access according to the access structure, which greatly improves information security.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a distributed trusted organization identity access control system and method. Background technique [0002] In the business scenario of multi-organization collaboration, the identities of all participants need to be trusted, so that the business process is authentic and effective, and the results cannot be denied. Its credible identity is reflected in the credible personal citizenship of the subjects participating in the business, the credible relationship between the individual and the organization, and the credible identity of the organization represented by the individual; [0003] The user and authority management of traditional application systems usually use user names and passwords to verify user identities, and then determine the user's identity in the organization according to the user's role or group, and use this as a basis for authorization and access con...

AI Technical Summary

Problems solved by technology

[0004] In order to solve the problems in the above solution, the present invention provides a distributed trusted organization identity access control system and method, which solves the problem of organization identity verification in the business scenario of multi-organization cooperation without leaking privacy

Images