Cross-domain authentication method between Kerberos and IBC security domains based on alliance chain

Abstract

The invention relates to a cross-domain authentication method between Kerberos and IBC security domains based on an alliance chain, and the method comprises the steps: firstly authenticating the identity information of a target domain entity through a protocol when an entity node in a security domain initiates a cross-domain authentication request, then enabling the identity information of the entity to generate a cross-domain certificate, and storing the cross-domain certificate on a block chain; the authentication information cannot be tampered on the block chain and is confirmed by a plurality of cross-domain nodes according to a consensus protocol, so that decentralization of entity authentication information storage is realized; when an entity node in a security domain requests to authenticate an entity node which has been subjected to cross-domain authentication, in order to improve authentication efficiency, a cross-domain certificate can be directly sent to a target entity node, and the target entity node can complete re-authentication service of an entity identity after the validity of the target entity node is verified by a block chain. The technical problems that a cross-domain authentication centralization model between the Kerberos and the IBC is complex, authentication information management is difficult and the like are solved.

Description

technical field [0001] The invention relates to a cross-domain authentication technology between entities in different security domains, in particular to the first authentication technology, the re-authentication technology and the revocation authentication technology between the Kerberos domain and the IBC security domain. Background technique [0002] With the continuous development of industrial Internet technology and network information security technology, the application scale of industrial Internet in my country's intelligent manufacturing field continues to expand. More and more manufacturing enterprises, organizations or industry institutions use the network environment to build their internal security trust domains. Since each security trust domain adopts different identity authentication frameworks, they are incompatible with each other and are managed by different enterprise institutions, making different security trust domains. It is difficult to build an effic...

AI Technical Summary

Problems solved by technology

The authentication process is the premise of data sharing and secure transmission between the two parties in communication. With the continuous increase of application and technical requirements such as flexible production, agile production and personalized production, cross-domain authentication technology in the manufacturing production network is particularly important; however, There are many problems in the current cross-domain authentication method, mainly including: too much reliance on centralized third-party nodes, difficulty in authentication between heterogeneous trust domains, and complicated authentication information management

Images