Collaborative Trust-Domain Verification for Near-Source Access Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional network access control methods based on a binary trust model fail to provide near-source detection and protection against malicious attacks, leading to degraded security of the server side.
Innovation Solution
Establish a collaborative verification method that involves establishing trust collaboration relationships between multiple trust domains, allowing one domain to perform access verification on a terminal device and implement related information verification of another domain, thereby achieving near-source detection and protection against attacks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If independent identity authentication is performed on the user terminal device respectively at the network side and the server side, then the verification process is simplified for each domain, but the security of the server side is degraded due to inability to achieve near-source detection of malicious attacks
Solution Approach 1:
The patent merges the verification capabilities of multiple trust domains by establishing trust collaboration relationships. The first trust domain performs access verification on the terminal device and implements related information verification of the second trust domain, combining what were previously separate independent authentication processes into a collaborative verification system that maintains operational simplicity while enhancing security through near-source detection.
Solution Approach 2:
The patent introduces a trust collaboration relationship as an intermediary mechanism between trust domains. This intermediary enables the first trust domain to verify terminal devices while implementing related information verification of the second trust domain, allowing security enhancement without requiring each domain to independently perform all verification functions.
2Reliability
If multiple trust domains perform independent verification on terminal devices, then near-source detection and protection against attacks is achieved, but the data processing burden of individual domains increases
Solution Approach 1:
The patent segments the verification process by defining specific roles for different trust domains. The first trust domain performs access verification on terminal devices, while the second trust domain's related information verification is implemented by the first trust domain. This segmentation distributes the data processing burden across multiple domains rather than concentrating it in one domain, maintaining both security and processing efficiency.
Solution Approach 2:
The first trust domain is designed with multi-functionality, performing both access verification on terminal devices and related information verification of the second trust domain. This universal approach allows a single domain to handle multiple verification functions, reducing the overall data processing burden on individual domains while maintaining comprehensive security verification.
Data Source
AI summary
A collaborative verification method, a collaborative authentication method, an operator device, an enterprise device, a terminal device, a relay device, and a storage medium are disclosed. The collaborative verification method may include: establishing a first trust collaboration relationship with a second trust domain; and acquiring an access request sent by a terminal device, and performing access verification on the terminal device according to the first trust collaboration relationship and the access request, such that related information verification of the second trust domain is implemented in the first trust domain.