Mail transmission agent primary anti-deny method based on domain hierarchy identifying mechanism

Abstract

This invention relates to non-repudiation of origin method for mail proxy based on DNS domain level certification authority. It contains 1, establishing CA, 2, establishing level structure CA corresponded with all DNS domain level structure, 3, generating and distributing MTA certificate, 4, source MTA calculating Hash value H to mail to be send, making digital signature to H by private key, said signature information is sig, 5, forming certificate chain mcerts to certificate from said field to root field, 5, sending {M, sig, mcerts} to next MTA, 7, identifying MTA certificate as being received by receiver MTA, 8, taking public key from identified source certificate, identifying the digital signature of source MTA to M by public key, 9, directly writing user mail box or sending to next MTA. Said invention realizes the forced non-repudiation of origin between MTA to MTA with convergent divergent level CA structure.

Description

Technical field [0001] The invention relates to Internet email security technology, in particular to an original non-repudiation method of a Mail Transfer Agent (MTA) based on a domain name (DomainName System, DNS) hierarchical certification authority (Certificate Authority, CA). Background technique [0002] Email is one of the most widely used services on the Internet, but email is also one of the least secure services on the Internet. On the one hand, a large number of applications of e-mail in e-government, e-commerce, etc. make the demand for secure communication by e-mail growing at an alarming rate; Mail security issues affect the normal use of mail. Therefore, the security problem of e-mail has been paid more and more attention by people. [0003] E-mail users must take social responsibility for their communication behavior, and the e-mail system must also consider the issue of social responsibility. According to Xinhua News, US President Bush signed a federal bil...

AI Technical Summary

Problems solved by technology

But there are still the following problems: (1) The end-to-end e-mail sender's non-repudiation problem depends on whether the sender signs the mail he sends, and the mail transmission system in the end-to-end method cannot enforce the sender to fulfill the non-repudiation requirement. responsibility

At this time, the sender of the spam does not encrypt and sign the content of the mail, and the receiver of the mail cannot determine the integrity of the mail and the real identity of the sender

(2) The local MTA does not authenticate the sender UA, which means that the attacker can use the legitimate UA identity to send a large amount of spam

However, with the continuous expansion of the application scale of public key cryptography in network security, this distribution method can no longer be adapted. At this time, PKI (Public Key Infrastructure) is needed to solve a large number of key distribution and management.

Images