Trusting method of network information system based on family genes

Abstract

The invention constructs an evolution graph of network family and uses it to build a trust relationship. The evolution graph of network family includes parents, children, visitor and temporary member. Wherein, the children are actual services in network. Each sub-network family has a housemaster, and under his control there are children, visitor and temporary member. The housemaster assigns gene for others and makes relevant family rules (access control strategy). All family members inherit family gene from father. Whole network evolves from an original ancestor network. The legal position of all family members is ensured by appointing family gene, variation gene, genetic code, gene signature and family rules. The gene assignation and gene signature compose a gene certificate that can not be decrypted by outsider.

Description

technical field [0001] The invention proposes a family gene-based trust method for a network information system, which belongs to the field of computer network and information security. Background technique [0002] The trust method in computer network and information security technology provides the basis for mutual trust between the two parties in communication, mainly including identity authentication and access control, and is the basis for ensuring the security of network information systems. [0003] In the field of information security, most of the traditional identity authentication and access control methods are based on public key infrastructure / privilege management infrastructure (PKI / PMI). and other methods to achieve access control. However, this PKI / PMI-based trust method has obvious shortcomings: the certificate subject information is not clear, and it is difficult to distinguish entities with the same name in reality; large amount of calculation, low efficie...

AI Technical Summary

Problems solved by technology

However, this PKI / PMI-based trust method has obvious shortcomings: the information of the certificate subject is not clear, and it is difficult to distinguish entities with the same name in reality; the amount of calculation is large, the efficiency is low, the key management is difficult, the implementation is complicated, and the cost is high;…; and many more

[0004] The applications with patent publication numbers CN1674499 and CN1674500 identify the identity of users by collecting fingerprints, but these technologies cannot identify the identity of network devices; the applications with patent publication numbers CN1547142, CN1564511, and CN1614924 propose identity authentication methods based on dynamic passwords , to solve the defects such as insecure password plaintext transmission, but they all depend on the wireless mobile network, so the scope of application is limited; the application cases with patent publication numbers CN1444169, CN1449154, and CN1545243 provide identity authentication technology based on public key certificates, Although it has been specifically applied in the project, it cannot solve the problems of complex key management and unclear subject information of public key certificates.

The application with patent publication number CN1627683 realizes the integration of user authentication and access control in multiple application systems, but the centralized registration and identity verification methods for users are difficult to adapt to the actual application of a large number of users

Images