Method and system for implementing third-party authentication based on gray list

Abstract

The present invention relates to a communication method, comprising: receiving a service request from a requesting party; performing a third-party authentication on the service request according to a gray list and obtaining an authentication result; and processing the service request according to the authentication result. The present invention relates to a communication system, comprising: means for receiving a service request from a requesting party; means for performing a third-party authentication on the service request according to a gray list and obtaining an authentication result; and means for processing the service request according to the authentication result. The present invention implements a third-party control of services based on the gray list, and can effectively manage a variety of services in the communication system.

Description

FIELD THE INVENTION[0001]The present invention relates to a communication system, and more specifically, to a method and system using a gray list for third-party authentication in the communication system.BACKGROUND OF THE INVENTION[0002]Currently, white lists and black lists are widely used technology, which indicates a corresponding service request should be allowed or denied. For white lists and black lists, the behaviors of a system are predefined, whereby the white Lists and black lists can be seen as predefined rules. In reality, the white list and black list rules are applied to a lot of systems or services, such as, operating system, firewall, antivirus software, mail systems, application software, voice call, data communications, data storage, etc. In general, the white list and black list rules are applied to almost all of the applications involving control. If a white list is established, then only users (or IP address, IP packet, mail, etc.) in the white list can obtain ...

AI Technical Summary

Benefits of technology

Enables real-time service control and accurate authentication, preventing malicious requests from being mistakenly granted access and ensuring that services are managed effectively by third parties, enhancing security and control in communication systems.

Problems solved by technology

If a black list is established, then users (or IP address, IP packet, e-mail, virus, etc.) listed in the black list cannot obtain the grant of the system.

For example, in a communication operating system, if a certain user (for example, the user's identifier) is listed in a black list, then it may not be able to get a certain service or all services.

For example, in an instance needing service control by a third party, the white and black lists cannot implement third-party control of the services, and cannot implement real-time control of the services.

However, the way hereinabove still has a problem that when a malicious attacker sends a service request again after a specified time, such as 10 minutes, then the system will put the malicious attacker into the white list, so that the system is still unable to accurately determine whether to provide the service to an unknown service requester.

Moreover, when the requested service of the requester needs authentication from a third party, for example, the service is managed by a third party, the white and black lists cannot implement third-party authentication.

Images