A cross-trust domain authentication method for distributed network system

A distributed network and authentication method technology, applied in the field of cross-trust domain authentication, can solve the problems of system efficiency bottleneck, difficult hardware implementation, and inability to effectively solve cross-domain interactive authentication, so as to avoid creation and maintenance costs and reduce operating costs Effect

CN103973451BInactive Publication Date: 2017-04-12SOUTHWEST JIAOTONG UNIV
3 Cites 2 Cited by

Patent Information

Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Publication Date
2017-04-12
Estimated Expiration
Not applicable · inactive patent

Smart Images

  • Figure 1
    Figure 1
  • Figure 2
    Figure 2
  • Figure 3
    Figure 3
Patent Text Reader

Abstract

The invention discloses a cross-trust domain authentication method for a distributed network system. The method adopts a distributed key generation based on an elliptic curve cryptosystem and a threshold signature mechanism to construct a virtual bridge authentication center VBCA, and uses the virtual bridge authentication center to VBCA completes the cross-domain interactive authentication between different trust domain entities in the distributed network system. The inventive method is universal to various organizational structures, agile and dynamic, low cost, short authentication path, high bit security, high efficiency and easy hardware It is beneficial to solve the problem of cross-domain interactive authentication between entities in different trust domains in a dynamic distributed network system with limited terminal resources or communication bandwidth. In cloud computing and cloud storage networks, Internet of Things, wireless sensor networks, It has broad application prospects in agile manufacturing systems and virtual organizations.
Need to check novelty before this filing date? Find Prior Art

Description

technical field

[0001] The invention relates to a cross-trust domain authentication method for a distributed network system. Background technique

[0002] With the rapid development of information technology and the widespread popularization of network applications, distributed applications in a cross-domain large-scale network environment have gradually become a new focus issue in the IT industry and academia because of their intensification, scale and high scalability. In dynamic distributed network applications such as cloud computing and cloud storage networks, Internet of Things, wireless sensor networks, agile manufacturing systems, and virtual organizations, collaboration across regions and trust domains is inevitable, and there are frequent interactions or large-scale interactions between multiple systems. Scale data flow. In order to ensure the safe and efficient sharing of data between systems in different trust domains that are dynamically loosely coupled, it is ...

Examples

Embodiment

[0064] see figure 1 , an embodiment of the present invention is a cross-trust domain authentication method for a distributed network system, and the specific steps are as follows:

[0065] A. Creation of the Virtual Bridge Certification Center

[0066] A1. All members of the distributed network system trust domain D i (i=1,2,...,m) Common parameters of the system are jointly selected: the elliptic curve E on the finite field GF of the cryptographic algorithm and the q-order base point P on the elliptic curve E, the secret sharing threshold t, where i is the serial number of the member trust domain, m is the number of member trust domains, and q is the large prime factor of the order of the elliptic curve E;

[0067] A2. All members trust domain D i According to the organizational model of the distributed network system and the cooperative relationship between the trust domains, negotiate and publish the trust domain D of each member i The permission set V i ,Satisfy Amo...