CN101707613B - Authentication system based on trust negotiation and user login and collaboration systems and methods - Google Patents

Abstract

An authentication system based on trust negotiation includes a policy analysis module, a policy processing module, a certificate processing module, a policy library module, a certificate library module and a consistency checking module; a user login system using the authentication system based on trust negotiation of the present invention , including a user module, a user management module, and a server trust negotiation module; a user collaboration system adopting the authentication system based on trust negotiation of the present invention includes at least two user modules, and each user module includes its own user trust negotiation module , each user module is connected to each other through a network; thereby providing an authentication system based on trust negotiation that increases the security of network application systems such as online games, a system and method for user login using the authentication system, and users using the authentication system Collaborative systems and methods.

Description

Authentication system based on trust negotiation and system and method for user login and collaboration

technical field

The invention relates to the field of broadcast communication, in particular to an authentication system based on trust negotiation, a system and method for user login using the authentication system, and a system and method for user collaboration using the authentication system.

Background technique

With the development of network technology and the overall acceleration of social informatization, the importance of network and information systems is increasing day by day. Information security has become an overall issue related to economic development, public interests, social stability, and national security. In order to strengthen information security work, it is necessary to popularize information security knowledge in various ways, improve public security awareness, and actively explore various forms of information security personnel training. Among them, games, as an effective auxiliary method, help people acquire safety knowledge and improve safety awareness, achieving twice the result with half the effort.

The well-known hacking games at home and abroad include uplink, Hack The Game, hacker elite series, hacker base series, computer newspaper hacker games, etc. The ideas of these game developers are similar, and they pay attention to the cultivation of the specific application ability of the player's hacking knowledge, but the form is single, and they are basically various password cracking methods for specific applications to crack the passwords required for customs clearance. The requirements are high, while other aspects of hacking knowledge are rarely involved and there is no plot. Simultaneously, a common problem that these games exist is that the game players all fight on their own, without communication and communication with each other, which not only greatly reduces the fun of the game, but also is not conducive to mutual promotion and learning between players, so the present invention On the basis of similar games, a network coordination mechanism is introduced.

In addition, although there are many other types of network collaborative games outside the field of information security, in the existing network collaborative games, due to the lack of corresponding security protection measures, user sensitive information leaks, game equipment and props are stolen, etc. Security phenomena occur from time to time, seriously affecting the enthusiasm of game users, and even causing many legal disputes.

Therefore, today's security issues have become a key factor restricting the further development and application of the network.

At present, the scheme based on the "username/password" pair is widely used on the Internet, which requires each website to provide a user management system. Users who request services or resources of the website must first fill in certain personal information and apply for a For the user name and password, use the applied user name and password to log in when visiting this site in the future. The advantage of this scheme is that it is simple and direct to implement, so it is widely used. However, its disadvantages are also obvious: first, this kind of access control has a coarse granularity and cannot meet the needs of further division; second, the way of user name and password is relatively easy to be stolen, once the user name and password are stolen, the information stored by the user in the system All are facing the risk of being stolen, so that the system security cannot be guaranteed.

Some websites use digital certificates to improve system security and further confirm user identities and capabilities. The service requester submits the digital certificate held by the service provider to indicate its own attributes; the service provider's authorization is based on whether the requester's attributes meet the access control policy corresponding to its access request. However, digital certificates are likely to include some sensitive information, such as bank account information. For this type of certificate, service requesters should be reluctant to submit blindly until they have established the true identity of the service provider. That said, certificates containing sensitive attribute information also need to be protected. Moreover, the requester and provider of the service should only interact after completing two-way authentication. In this situation, trust negotiation comes into being, which means that through the interactive disclosure of digital certificates and access control policies, the requester and provider of services or resources automatically establish a trust relationship.

Contents of the invention

Aiming at the defects of the above-mentioned prior art, the object of the present invention is to provide an authentication system based on trust negotiation for increasing the security of online games and other network application systems, a system and method for user login using the authentication system, and an authentication system using the authentication system. Systems and methods for user collaboration.

To achieve the above object, the present invention adopts the following technical solutions:

An authentication system based on trust negotiation, including a policy analysis module, a policy processing module, a certificate processing module, a policy library module, a certificate library module and a consistency checking module;

The policy library module is used to store policies;

The certificate library module is used to store certificates;

The policy parsing module is used for parsing the incoming policy, and judging whether sensitive certificates are involved in the policy, if it is involved, it will be processed by the policy processing module, and if it is not involved, it will be processed by the certificate processing module;

The policy processing module is used to call out the corresponding policy from the policy library module, return it to the requester, and store the provided policy in the consistency check module; request, call out the corresponding protection policy from the policy library module, return it to the requester, and store the provided protection policy in the consistency check module;

The certificate processing module is used to call out the certificate from the certificate library module to provide the certificate chain to the certificate requester according to the sequence described in the policy, and store the received certificate chain into the consistency verification module according to the order ;

The consistency check module is used to verify the consistency of the received certificate chain and policy, if it is consistent, it will inform the requesting party that the trust negotiation is successful, and provide corresponding services to the requesting party; Provide services.

In the authentication system based on trust negotiation of the present invention, the consistency check module further includes a sequence set module, and the sequence set module stores certificate chains.

A user login system adopting the above authentication system based on trust negotiation, including a user module, a user management module and a server trust negotiation module;

The user module sends its own user information to the user login management module, and makes an access request;

The user management module verifies the user information, if the verification fails, it informs the user module that the login fails, and if the verification succeeds, it sends an access request to the server trust negotiation module;

The server trust negotiation module receives the access request sent by the user management module, calls out the corresponding strategy according to information such as the user level in the user management module, returns it to the user module, and saves the strategy;

The user module receives the policy returned by the server trust negotiation module, searches for the corresponding certificate according to the policy requirements, forms a certificate chain, and sends the certificate chain to the server trust negotiation module;

The server trust negotiation module saves the certificate chain according to the order, and verifies the certificate chain and the saved policy, and if the two are consistent, it informs the user module that the negotiation is successful, and the user module can perform corresponding access, otherwise Inform the user module that the login failed.

In the user login system of the present invention, the user module includes a user login module and a user trust negotiation module, and the user trust negotiation module includes a user policy analysis module, a user policy processing module, a user certificate processing module, a user policy library module, a user Certificate storehouse module and user consistency check module; Described user management module comprises user registration management module, user login management module, user level management module and user information storage module; Described server trust negotiation module comprises server policy analysis module, server policy processing module, server certificate processing module, server policy library module, server certificate library module and server consistency check module;

The user login module sends its own user information to the user login management module, and sends an access request;

The user login management module queries the user information in the user information storage module, and verifies the user information. If the verification fails, it informs the user login module that the login failed. If the verification succeeds, it sends an access request to the server. Policy processing module;

According to the checkpoint access request sent by the user login management module, the server policy processing module calls out the corresponding policy from the server policy library module according to the user level and other information in the user level management module, and returns it to the user trust negotiation module , and save the policy in the server consistency check module;

The user policy analysis module in the user trust negotiation module receives the policy returned by the server policy processing module, and hands it to the user certificate processing module, and the user certificate processing module searches the corresponding user certificate library module according to the policy requirements. A certificate, forming a certificate chain, and sending the certificate chain to the server certificate processing module;

The server certificate processing module stores the certificate chain in the server consistency check module according to the sequence, and the server consistency check module checks the certificate chain and the saved policy, and if the two are consistent, then notify the If the user login module negotiates successfully, the user login module can perform corresponding access; otherwise, the user login module is notified that the login fails.

In the user login system of the present invention, the server consistency check module further includes a server sequence set module, and the server sequence set module stores certificate chains.

A user collaboration system adopting the above authentication system based on trust negotiation, including at least two user modules, each user module includes its own user trust negotiation module, and each user module is connected to each other through a network;

User A and User B establish a connection, User B returns User A's information, and User A trusts User A's policy analysis module in the negotiation module to determine whether the information returned by User B is a policy or a certificate;

If it is a policy, it is analyzed to see if it involves the sensitive certificate owned by user A. If the analysis result involves the sensitive certificate owned by user A, the policy analysis module of user A notifies the policy processing module of user A to process it. The policy processing module calls out the protection policy on sensitive certificates in user A's policy library module, and returns the protection policy on sensitive certificates to user B's trust negotiation module. If the analysis result of user A's policy analysis module does not involve sensitive certificates, user A The policy analysis module notifies user A's certificate processing module to process, and the user A's certificate processing module calls out the certificates involved in the policy sent by user B in the user A's certificate library module according to the access control policy sent by user B, and returns them to user B Trust negotiation module;

If the policy analysis module of user A judges that the information returned by user B is a certificate, it will notify the certificate processing module of user A to process it, and the certificate processing module of user A will save the certificate returned by user B to the consistency verification module of user A. The module verifies whether the certificate is consistent with the policy requirements proposed by user A to user B before. If they are consistent, the two parties will establish a trust relationship, and user B can communicate with user A to understand the sensitive information they own. The negotiation failed, and the two parties cannot establish a collaborative connection.

A login method for a user login system adopting the above-mentioned authentication system based on trust negotiation, comprising the following steps:

The user login module sends user information such as the user's own user name and password to the user login management module, and makes an access request;

The user login management module queries the user information in the user information storage module, and verifies the user information. If the verification fails, the user login module is notified of the login failure. If the verification is successful, the access request is sent to the server policy processing module. The server policy processing module The access request sent by the user login management module, according to the user level and other information in the user level management module, calls out the corresponding policy from the server policy library module, returns it to the user trust negotiation module, and saves the policy in the server consistency check in the module;

The user policy analysis module in the user trust negotiation module receives the policy returned by the server policy processing module and sends it to the user certificate processing module. The user certificate processing module searches the corresponding certificate from the user certificate library module according to the policy requirements to form a certificate chain The certificate chain is sent to the server certificate processing module, and the server certificate processing module stores the certificate chain in the server sequence set in the server consistency verification module according to the order;

The server consistency verification module verifies the certificate chain saved by the server certificate processing module and the policy saved by the server policy processing module. If they are consistent, the user login module is notified that the negotiation is successful, and the user login module can perform corresponding access, otherwise the user is notified Login failed.

A method for coordinating a user coordinating system using the above-mentioned authentication system based on trust negotiation, comprising the following steps:

The user A policy analysis module in the user A trust negotiation module judges whether the information returned by user B is a policy or a certificate;

If it is a policy, User A’s policy analysis module analyzes it to see if it involves the sensitive certificate owned by User A itself. If the analysis result involves the sensitive certificate owned by User A itself, User A’s policy analysis module notifies User A’s policy processing module For processing, user A's policy processing module calls out the protection policy on sensitive certificates in user A's policy library module, and returns the protection policy on sensitive certificates in user B's trust negotiation module. If the analysis result does not involve the sensitive certificates owned by user A , the policy analysis module of user A notifies the certificate processing module of user A to process, and the certificate processing module of user A calls out the certificates involved in the policy sent by user B in the certificate library module of user A according to the access control policy sent by user B. Return the trust negotiation module to user B;

If it is a certificate, the policy analysis module of user A notifies the certificate processing module of user A to process it, and the certificate processing module of user A saves the certificate returned by user B to the consistency verification module of user A, and the consistency verification module of user A verifies the certificate and the user Whether A’s previous policy requirements for user B are consistent. If they are consistent, the two parties will establish a trust relationship. User B can communicate with user A to understand the sensitive information they own. Otherwise, user B will be informed that the negotiation failed, and the two parties cannot establish coordination. connect.

Trust negotiation can automatically and dynamically establish a trust relationship between unfamiliar network entities in different security domains through certificate exchange; both negotiators can formulate policies to protect their sensitive resources and control access to each other's requests; During the negotiation process, the participation of a trusted third party is not required.

Since the present invention adopts the system and method of trust negotiation and authentication, further authentication can be carried out to ensure the security of authentication, thereby increasing the security of the network cooperative game system.

Description of drawings

Fig. 1 is a system block diagram of an authentication system based on trust negotiation in the present invention;

Fig. 2 is a system block diagram of the network attack and defense game system of the authentication system based on trust negotiation of the present invention;

Fig. 3 is a block diagram of a user collaboration system adopting the authentication system based on trust negotiation of the present invention;

Fig. 4 is the flow chart of the login method of the user login system adopting the authentication system based on trust negotiation of the present invention;

Fig. 5 is a flowchart of a collaboration method of a user collaboration system using the trust negotiation-based authentication system of the present invention;

Fig. 6 is a schematic diagram of the negotiation process of user A when the user logs in according to the present invention;

Fig. 7 is a schematic diagram of the negotiation process of user B when the user logs in according to the present invention;

Fig. 8 is a schematic diagram of the negotiation process between user A and user B during user negotiation in the present invention;

FIG. 9 is a schematic diagram of the negotiation process between user A and user B and the server during user negotiation in the present invention.

Detailed ways

The implementation of the authentication system based on trust negotiation and the system and method for user login and collaboration of the present invention will be described in detail below with reference to the accompanying drawings.

Referring to FIG. 1 , an authentication system for trust negotiation includes a policy analysis module 1 , a policy processing module 2 , a certificate processing module 3 , a policy library module 4 , a certificate library module 5 and a consistency checking module 6 .

The policy analysis module 1 is used to analyze the policy imported by the requested party, and judge whether the policy involves sensitive certificates. If it is involved, it will be processed by the policy processing module 2, and if it is not involved, it will be processed by the certificate processing module 3;

When the policy processing module 2 is requested, it calls out the corresponding policy from the policy library module 4, returns it to the requester, and stores the provided policy in the consistency check module 6; or according to the sensitive certificate sent by the policy analysis module 1 call out the corresponding protection policy from the policy library module 4, return it to the requesting party, and store the provided protection policy in the consistency check module 6;

The certificate processing module 3 is used to call out the certificate from the certificate library module 5 to provide the certificate chain to the certificate requester according to the sequence described in the policy, and store the received certificate chain into the consistency check module 6 according to the sequence. In sequence set module 7;

The policy library module 4 is used to store corresponding policies, including access control policies and negotiation policies, wherein the access control policy is the main policy for network security prevention and protection, and its task is to ensure that network resources are not illegally used and accessed illegally. The access control policy stipulates the set of trust certificates that need to be provided to access protected resources; the negotiation policy discloses the certificate rules of the entities involved in the trust negotiation, expressing a logical relationship that the entities follow when completing the trust negotiation. For example, the order of message delivery between entities and various constraints between entities, etc.;

The certificate library module 5 is used to store corresponding certificates, and the certificates are privileged attribute digital certificates issued by an authority, including the signature of the issuing authority, the public key of the trust certificate holder, etc., and are used to authorize the subject. In the present invention Most of the certificates used are issued by the server for the user;

The sequence set module 7 stores certificate chains in order;

Consistency check module 6 is used to verify the consistency of the received certificate chain and policy. If they are consistent, the requester will be notified that the trust negotiation is successful, and corresponding services will be provided to the requester. Otherwise, the requester will be notified that the trust negotiation has failed and the requester will not be provided Serve.

Referring to Fig. 2, the present invention uses a network attack and defense game system to illustrate the user login system and user collaboration system using the authentication system of the present invention.

A network attack and defense game system based on trust negotiation authentication system, including several user modules 10, user management module 20, server trust negotiation module 30, system checkpoint module 40, network collaboration module 50 and trust evaluation module 80, user module 10 includes a user login module 11 and a user trust negotiation module 12; the user management module 20 includes a user registration management module 21, a user login management module 22, a user level management module 23 and a user information storage module 24; the system checkpoint module 40 includes a question-and-answer module 41. Points management module 42 and specific level module 43; network collaboration module 50 includes WEB chat module 51 and online user management module 52.

The present invention adopts the user login system of the authentication system based on trust negotiation, including user module 10, user management module 20 and server trust negotiation module 30, user module 10 includes user login module 11 and user trust negotiation module 12; user management module 20 includes User registration management module 21 , user login management module 22 , user level management module 23 and user information storage module 24 .

The user login module 11 is used for the user to register and log in.

The user registration management module 21 is used to receive the registration and login performed by the user login module 11, and provide a corresponding user registration interface for the user logging in for the first time, and store the user information in the user information storage module 24 after the user registration is successful.

The user login management module 22 is used for the user information provided by the user login module 11 in the login process including user name and password, and checks the user information in the user information storage module 14 by querying. After the verification is successful, the user information is provided. Trust the negotiation module 30 to the server to further verify the identity and authority of the user.

The user level management module 23 stores the user level after the user clears the level.

The user information storage module 24 stores user information, including user names and passwords.

After the user registers, when the user logs into the system, the user login module 11 sends user information such as its user name and password to the user login management module 22, and requests to visit the corresponding checkpoint, and the user login management module 22 queries the user information storage module 24 If the verification fails, the user login module 11 will be notified of the login failure. If the verification is successful, the checkpoint access request will be sent to the server policy processing module 302. The server policy processing module 302 will log in the management module 302 according to the 22, according to the information such as the user level in the user level management module 23, call out the corresponding policy from the server policy library module 304, return it to the user trust negotiation module 12, and save the policy in the server consistency In the verification module 306, the user policy analysis module 121 in the user trust negotiation module 12 receives the policy returned by the server policy processing module 302, and hands it to the user certificate processing module 123, and the user certificate processing module 123 retrieves the policy from the user certificate library module 125 according to the policy requirements. Find the corresponding certificate, form a certificate chain, and send the certificate chain to the server certificate processing module 303, the server certificate processing module 303 stores the certificate chain in the server sequence set 307 in the server consistency check module 306 according to the order, and the server Consistency checking module 306 checks the certificate chain and the saved strategy, if they are consistent, then inform the user login module 11 that the negotiation is successful, and the user login module 11 can access the corresponding checkpoint, otherwise inform the user login module 11 that the negotiation failed, and the user The login module 11 does not have the authority to access the corresponding level.

When the server consistency checking module 306 informs the user that the negotiation is successful, the user login module 11 enters the system checkpoint module 40 to play the game. Presentation in the form of questions, related to the corresponding information security technology to be used in this checkpoint; the points management module 42 counts the total number of questions answered and the number of questions answered correctly by users in the knowledge quiz module 41, and gets one point for each correct answer. And the statistical results are sent to the specific level module 43; the specific level module 43 is the main body of the game, adopts the form of the WEB interface, and involves various aspects of information security knowledge in the level, such as: encryption and decryption, information hiding technology, denial of server attacks and Trojan horse principle, etc. After the user passes through the specific checkpoint module 43 , the specific checkpoint module sends information such as user points and grades after the user has cleared the checkpoint to the user grade management module 23 .

In the process that the user carries out game, can adopt network cooperation module 50 to carry out cooperative game, network system module 50 comprises WEB chat module 51 and online user management module 52, and WEB chat module 51 is the main interface that user communicates, and it is embedded in game system In the WEB interface, it can provide users with functions such as private chat and shouting in the group. At the same time, users can also choose fonts and emoticons according to their own needs. The user selects the corresponding user from the online user list and then triggers their respective trust negotiation modules. Through their respective trust negotiation modules, the two parties negotiate to establish a basic trust relationship, communicate, discuss research methods, and coordinate research.

The online user management module 52 makes statistics on online users, and arranges them according to their grades, so that users can easily find and select appropriate users to obtain help or collaborate in tackling key problems.

The trust degree evaluation module 80 uses the formula: accuracy rate=(user's actual points/user's due points)*100% according to the user's point records in the specific checkpoint module 43 .

Calculate the accuracy rate of the user, and draw the corresponding credit degree of the user according to the scope of the accuracy rate, and send it to the user grade management module 23, so that the server policy processing module 302 in the server trust negotiation module 30 can provide the user with the corresponding credit degree according to the corresponding credit degree. Different strategies are offered.

The user collaboration system adopting the authentication system based on trust negotiation of the present invention includes at least two user modules, each user module has its own trust negotiation module, and each user module is connected to each other through the network.

With reference to FIG. 3 , the trust negotiation module 60 of user A and the trust negotiation module 70 of user B are taken as examples to describe in detail.

After user A and user B log in, user A and user B enter the system checkpoint module 40 and the network collaboration module 50 respectively, and when user A selects user B from the online user list, their respective trust negotiation modules are triggered.

At this time, after user A establishes a connection with user B's request, or after user B establishes a connection with user A's request, user A's trust negotiation module 60 or user B's trust negotiation module 70 provides a piece of user return information for the other party's trust negotiation module. If user A makes a request to user B, user B returns an access control policy to user A, and if user B makes a request to user A, user A returns an access control policy to user B, using the working process of user A as an example : The user A policy analysis module 601 in the user A trust negotiation module 60 judges whether the information returned by the user B is a policy or a certificate. If it is a policy, it shows that the user A requests a collaborative connection from the user B, and the user A policy analysis module 601 trusts the user B. The strategy returned by the negotiation module 70 is analyzed to see if it involves the sensitive certificate owned by user A itself. If the analysis result involves the sensitive certificate owned by user A itself, the policy analysis module 601 of user A notifies the policy processing module 602 of user A to process it. User A's policy processing module 602 calls out the protection policy on sensitive certificates in user A's policy library module 604, and returns the protection policy on sensitive certificates to user B's trust negotiation module 70. If the analysis result of user A's policy analysis module 601 does not involve Sensitive certificates, user A’s policy analysis module 601 notifies user A’s certificate processing module 603 to process, and user A’s certificate processing module 603 calls out the user A’s certificate library module 605 according to the access control policy sent by user B. The certificates involved in the policy will be returned to user B’s trust negotiation module 70. If user A’s policy analysis module 601 judges that the information returned by user B is a certificate, it means that user B requests a connection from user A, and user A’s trust negotiation module 60 returns it to User B's trust negotiation module 70 provides an access control policy. User B's trust negotiation module 70 completes the actions completed by user A's trust negotiation module 60 and returns a certificate to user A's trust negotiation module 60. User A's policy analysis module 601 notifies user A of the certificate. The processing module 603 performs processing. The certificate processing module 603 of user A saves the certificate returned by user B to the consistency checking module 606 of user A. The consistency checking module 606 of user A verifies the certificate and the policy proposed by user A to user B before. Whether the requirements are consistent, if they are consistent, the two parties will establish a trust relationship, and user B can communicate with user A to understand the sensitive information they own. Otherwise, user B will be informed that the negotiation failed and the two parties cannot establish a collaborative connection.

Through the exchange of trust certificates between the user trust negotiation module 12 and the server trust negotiation module 30, the server trust negotiation module 30 has further confirmed the authenticity of the identity of the user, and gives the user corresponding access rights according to the credit certificate submitted by the user, and Through the exchange of trust certificates between each user trust negotiation module, users can conduct collaborative communication and jointly tackle key problems.

Referring to Fig. 4, a kind of login method of the user login system that adopts the authentication system based on trust negotiation of the present invention, comprises the following steps:

Step 401 , the user login module sends the user information such as the user name and password of the user to the user login management module, and requests to visit the corresponding checkpoint.

Step 402, the user login management module queries the user information in the user information storage module, and verifies the user information. If the verification fails, it informs the user login module that the login failed. If the verification succeeds, it sends a checkpoint access request to the server policy processing module.

Step 403, the server policy processing module calls out the corresponding policy from the server policy library module according to the checkpoint access request sent by the user login management module, and according to the user level and other information in the user level management module, and returns it to the user trust negotiation module, And save the policy in the server consistency check module.

Step 404, the user policy analysis module in the user trust negotiation module receives the policy returned by the server policy processing module, and sends it to the user certificate processing module.

Step 405, the user certificate processing module searches the corresponding certificate from the user certificate library module according to the policy requirements, forms a certificate chain, and sends the certificate chain to the server certificate processing module.

Step 406, the server certificate processing module stores the certificate chain in the server sequence set in the server consistency checking module according to the sequence.

Step 407, the server consistency checking module verifies the certificate chain saved by the server certificate processing module and the policy saved by the server policy processing module, and if they are consistent, the user login module is notified that the negotiation is successful, and the user login module can access the corresponding checkpoint, Otherwise, inform the user that the negotiation failed, and the user does not have the authority of the corresponding checkpoint.

The server trust negotiation module further confirms the identity of the user and the relevant authority possessed by the user by verifying the attributes of the credit certificate submitted by the user management module, thereby improving the security of the system.

Referring to Fig. 5, a collaboration method of a user collaboration system using the authentication system based on trust negotiation of the present invention includes the following steps:

Step 501 , User A's policy analysis module in User A's trust negotiation module judges whether the information returned by User B is a policy or a certificate, if it is a policy, go to step 502 , otherwise go to step 505 .

Step 502, User A's policy analysis module analyzes the information returned by User B to see if it involves the sensitive certificate owned by User A, if the analysis result involves the sensitive certificate owned by User A, then execute Step 503, otherwise execute Step 504 .

Step 503, User A's policy analysis module notifies User A's policy processing module to process, User A's policy processing module calls out the protection policy on sensitive certificates in User A's policy library module, and returns the protection policy on sensitive certificates to User B's trust negotiation module Strategy.

Step 504, User A's policy analysis module notifies User A's certificate processing module to process, and User A's certificate processing module calls out the certificates involved in the policy sent by User B in User A's certificate library module according to the access control policy sent by User B , returned to user B's trust negotiation module.

Step 505, User A's policy analysis module notifies User A's certificate processing module to process, User A's certificate processing module saves the certificate returned by User B to User A's consistency checking module, User A's consistency checking module verifies the certificate and User A's Check whether the policy requirements put forward by user B are consistent, if they are consistent, go to step 506, otherwise go to step 507.

In step 506, the two parties establish a trust relationship, and user B can communicate with user A to understand the sensitive information owned by each.

In step 507, user B is notified that the negotiation fails, and the two parties cannot establish a coordinated connection.

Some concepts in the present invention are described below:

Digital certificate (digital credential) is a digital tool used to carry relevant characteristics such as user identity/attribute. Since the certificate represents the identity of the user, the certificate must be verifiable and unforgeable. According to the usage in different systems, certificates can be divided into identity certificates and attribute certificates.

Authentication (authentication) is used to confirm the authenticity of the participant's identity, and prevent the occurrence of impersonation by checking the consistency of the user's identity. Before the start of trust negotiation, determining whether the identities of the communicating parties are legal is the guarantee for maintaining system security, and it is also the prerequisite for checking user authorization, certificate exchange, and system auditing. The method of authentication is mainly to check whether the "username-password" submitted by the user is true. For a system with a high security level, it is also necessary to extract identity information from the certificate submitted by the user to verify the user's identity and capabilities.

Authorization refers to analyzing the certificate submitted by the user, and assigning the user the right to access resources according to the attribute value on the certificate. What kind of operation authority the user has on resources, or what kind of service can be enjoyed, are all reflected in the authorization of the system to the user. In the trust management system based on identity authentication, the authorization to the user is mainly to activate the user's corresponding control operation on the resources.

Policy (policy) is used to protect resources from unauthorized access by legitimate users, so as to regulate the operation of resources by legitimate users. The access control policy determines which certificates are exposed in automatic trust negotiation and the order in which these certificates are exposed. Trust negotiation can be divided into service or resource protection policies and sensitive certificate protection policies according to the content of policy protection.

According to the complexity of the description, access control policies can be divided into meta-policies and composite policies. Meta-policies are the basic elements that compose compound policies, and their relationship is similar to the relationship between metadata and data. Generally, the system provides some operations, such as "∧/∨/!" to realize the composition and decomposition of composite strategies.

A meta-policy includes:

announcer holder property name attribute value  … validity period

The principle of trust negotiation is described below:

Trust negotiation is designed based on the principles we use to build trusting relationships in our daily lives. In our daily life, we often encounter the process of establishing a trusting relationship with strangers. For example, when we encounter a traffic police inspection while driving, the traffic police need us to show our driver’s license. In order to confirm the true identity of the traffic police, we often need the traffic police to show their police card. We will not show our own driver’s license until the traffic police show their police card. This is a simple process of establishing a trust relationship. In a computer network, through the interactive disclosure of digital certificates and access control policies, the requester and provider of services or resources automatically establish a trust relationship. This is trust negotiation.

An example to illustrate the trust negotiation process:

The two parties in the trust negotiation process need to pass relevant certificates to each other. Only after the certificates are verified can they access the relevant resources. The description of the access policy is defined as follows:

Definition 1: P _R is the access policy of related resources, and _PC is the access policy of sensitive certificates. F _R (C1...Ck) is a certificate chain for accessing resources, and F _C (C1...Ck) is a certificate chain for accessing sensitive certificates. When the certificate chain represented by _FR and _FC is True, the corresponding resources and sensitive certificates can be disclosed. The representation form is P _R ← F _R (C1, C2, ..., Ck), P _C ← F _C (C1, C2, ..., Ck). When false, the corresponding resources and sensitive certificates are not exposed.

Definition 2: C1, C2...Ck represent different trust certificates, and they are connected by logical symbols ∧ (and) and ∨ (or) to form a certificate chain. When the connected certificate chain has been checked for consistency, if it meets the requirements, the value of the returned certificate chain _FR or F _C is true, otherwise it is false.

For example, _FR (C1∧C2∧C3) is a certificate chain provided for resources. Only when C1, C2, and C3 are all satisfied, the value of _FR is true, and there is P _R ← _FR (C1, C2, C3). Another example is that F _C (C1∨C2∨C3) is a certificate chain provided for sensitive certificates. When one of the three certificates C1, C2, and C3 meets the conditions, the value of F _C is true, and there is P _C ← F _C (C1, C2, C3).

A user's score is a reflection of how much the user understands information security knowledge, and it also reflects the size of a user's clearance ability from the side. The authenticity of users with high points passing a checkpoint is more credible, while the authenticity of users with relatively low points passing a checkpoint needs more testing. By formula:

Accuracy rate = (the number of points earned by the user / the number of points earned by the user) * 100%

Get the user accuracy rate, and get the following credits according to the range of user accuracy rate:

Accuracy 0%-10% 10%-35% 35%-65% 65%-90% 90%-100% Credibility 0 1 2 3 4

In the negotiation process, using credit as a reference index, the way of providing different strategies for users with different credits is the adaptive strategy mode. The higher the credit, the simpler the strategy in the negotiation process, and the lower the credit, the more complex the negotiation strategy.

Example 1: There are two existing users who have the right to directly enter the third level, but the points of users A and B are different. User A has answered all the quiz questions correctly, while user B has answered all the questions wrong. When logging in, the negotiation process between users A and B is as follows:

See Figure 6, the negotiation process of User A:

User A: Submit the user name and password, and apply for the permission of the third level;

Server: verify the user name and password, and query the user points, and give the strategy P _third that A can access the third level according to the points;

User A: Search for the certificate and return F _Fthird (C1∧C2∧C3);

Server: After verifying the certificate sent by User A, notify that the negotiation is successful;

See Figure 7, the negotiation process of user B

User B: Submit the user name and password to apply for the permission of the third level;

Server: verify the user name and password, query the user points, and give the strategy P _first that B can access the first level according to the points;

User B: Search for the certificate and return the certificate F _first (C1);

Server: verify the certificate C1, and return the policy P _second of the second pass authority;

User B: Search for the certificate and return the certificate F _second (C2);

Server: verify the certificate C2, and return the policy P _third of the third level authority;

User B: Search for the certificate and return the certificate F _third (C3);

Server: After verifying the certificate C3 sent by user B, notify that the negotiation is successful;

Here, C1, C2, and C3 respectively represent the corresponding authority certificates that the system returns to the user after the user passes the first, second, and third levels.

The difference between the trust negotiation in the network collaboration process and the trust negotiation in the login process is that the user not only needs to negotiate with the server, but also needs to negotiate with the user. Users exchange their own certificates to ensure the credibility of each other's identities, establish trust relationships, and collaborate to tackle key problems.

Example 2: Both user A and user B have reached the fourth level, and their previous points are all full marks. The fourth level requires the two users to obtain prime numbers within 1000 and 1500 randomly generated by the system, and the sum of the two prime numbers is the level pass password.

This process can be expressed as follows:

See Figure 8., Figure 9, user A: submit an application to user B, request to establish a collaborative channel, and submit their own points;

User B: According to A's points, return the strategic requirements for establishing communication P _forth ← F _forth (C1∧C2∧C3∧C4), and provide their own points;

User A: Return the Credential Chain (C1∧C2∧C3∧C4), and propose a strategy P _forth ←F _forth (C1∧C2∧C3∧C4) based on B's points;

User B: Verify the certificate submitted by A and return the Credential Chain (C1∧C2∧C3∧C4);

User A: Verify the certificate submitted by User B;

The negotiation between the two parties is successful, and after the communication, it is decided that A will obtain the prime numbers within 1000, and B will obtain the prime numbers within 1500;

Party A and Party B respectively send requests to the server;

The server randomly generates a prime number within 1000 and a prime number within 1500, informs user A and user B respectively, and issues digital certificates C _A and C _B containing these two numerical attribute values for them.

User A and User B respectively inform the other party of the values they own, and exchange digital certificates C _A and C _B ;

User A and User B submit two sums to the server respectively;

The server proposes a strategy P _C5 ← F _C5 (C _A ∧ C _B ) for A and B to access the fifth level of authority;

User A and User B respectively submit their own certificate Credential Chain (C _A ∧ _{C B} );

The server verifies the certificates submitted by the two users, and verifies whether the sum of the prime numbers submitted by both parties is correct according to the sum of the attribute values of the certificates. If the authority certificate C5 of the fifth level is sent to the two people correctly;

The two parties successfully cleared the customs.

Here, C1, C2, C3, C4, and C5 represent the access authority certificates for Levels 1 to 5, respectively, and C _A and C _B represent the certificates issued by the server to A and B respectively, containing the selected random number attribute value.

Trust negotiation can automatically and dynamically establish a trust relationship between unfamiliar network entities in different security domains through certificate exchange; both negotiators can formulate policies to protect their sensitive resources and control access to each other's requests; During the negotiation process, the participation of a trusted third party is not required.

Since the present invention adopts the system and method of trust negotiation and authentication, further authentication can be carried out to ensure the security of authentication, thereby increasing the security of the network cooperative game system.

The above embodiments are only descriptions of preferred implementations of the present invention, and are not intended to limit the scope of the present invention. On the premise of not departing from the design spirit of the present invention, various technical solutions of the present invention can be made by ordinary engineers and technicians in the field. Variations and improvements should fall within the scope of protection defined by the claims of the present invention.

Claims (8)

1. the Verification System based on trust negotiation is characterized in that, comprises strategy analyzing module (1), tactful processing module (2), certificate processing module (3), policy library module (4), certificate repository module (5) and consistency check module (6);

Said policy library module (4) is used for storage policy;

Said certificate repository module (5) is used for Store Credentials;

Said strategy analyzing module (1) is used for the strategy that imports into is resolved, and whether relates to responsive certificate in the determination strategy, relates to then transferring to tactful processing module (2) and handling, and does not relate to then transferring to certificate processing module (3) and handling;

Said tactful processing module (2) is used for accessing corresponding strategy from said policy library module (4), returns to the requesting party, and the strategy that will provide deposits in the consistency check module (6); The request that relates to responsive certificate of perhaps sending according to strategy analyzing module (1) accesses protection strategies from policy library module (4), return to the requesting party, and the protection strategy that will provide deposits in the consistency check module (6);

Said certificate processing module (3) is used for from said certificate repository module (5), accessing certificate and to certificate request side certificate chain being provided according to the sequence described in the strategy, and the certificate chain of receiving is deposited in the consistency check module (6) according to order;

Said consistency check module (6) is used for the certificate chain and tactful consistency that verification is received, unanimity is then informed the success of requesting party's trust negotiation, and to the requesting party corresponding service is provided, otherwise informs the failure of requesting party's trust negotiation, to the requesting party service is not provided.

2. the Verification System based on trust negotiation according to claim 1 is characterized in that, also comprises sequence sets module (7) in the said consistency check module (6), said sequence sets module (7) Store Credentials chain.

3. the employing logging in system by user based on the Verification System of trust negotiation according to claim 1 or claim 2 is characterized in that, comprises line module (10), user management module (20) and server trust negotiation module (30);

Said line module (10) sends to the user profile of self in the user management module (20), and proposes access request;

Said user management module (20) is carried out verification to user profile, and the verification failure informs that then said line module (10) login failure, verification succeeds then send access request to said server trust negotiation module (30);

Said server trust negotiation module (30) receives the access request that said user management module (20) is sent, and the user gradation information according in the said user management module (20) accesses corresponding strategy, returns to said line module (10), and strategy is preserved;

Said line module (10) receives the strategy that said server trust negotiation module (30) is returned, and requires to search corresponding certificate according to strategy, forms certificate chain, and certificate chain is sent to said server trust negotiation module (30);

Said server trust negotiation module (30) is preserved certificate chain according to order; And the strategy of this certificate chain and preservation carried out verification; Both are consistent; Inform that then said line module (10) consults successfully, said line module (10) can be visited accordingly, otherwise informs said line module (10) login failure.

4. logging in system by user according to claim 3; It is characterized in that; Said line module (10) comprises user log-in block (11) and users to trust negotiation module (12), and said users to trust negotiation module (12) comprises subscriber policy parsing module (121), subscriber policy processing module (122), user certificate processing module (123), subscriber policy library module (124), user certificate library module (125) and users consistency inspection module (126); Said user management module (20) comprises user's registration management module (21), user login management module (22), user gradation administration module (23) and subscriber information storing module (24); Said server trust negotiation module (30) comprises server policy parsing module (301), server policy processing module (302), server certificate processing module (303), server policy library module (304), server certificate library module (305) and server consistency check module (306);

Said user log-in block (11) sends to the user profile of self in the said user login management module (22), and sends access request;

Said user login management module (22) is inquired about the user profile in the said subscriber information storing module (24); And user profile carried out verification; The verification failure informs that then said user log-in block (11) login failure, verification succeeds then send access request to said server policy processing module (302);

The outpost of the tax office access request that said server policy processing module (302) is sent according to user login management module (22); According to the user gradation information in the said user gradation administration module (23); From server policy library module (304), access corresponding strategy; Return to users to trust negotiation module (12), and strategy is kept in the server consistency check module (306);

The strategy that subscriber policy parsing module (121) reception server strategy processing module (302) in the said users to trust negotiation module (12) is returned; Give said user certificate processing module (123); Said user certificate processing module (123) requires from said user certificate library module (125), to search corresponding certificate according to strategy; Form certificate chain, and certificate chain is sent to said server certificate processing module (303);

Said server certificate processing module (303) is deposited into certificate chain in the said server consistency check module (306) according to order; Said server consistency check module (306) is carried out verification to the strategy of this certificate chain and preservation; Both are consistent; Inform that then said user log-in block (11) consults successfully, said user log-in block (11) can be visited accordingly, otherwise informs that said user log-in block (11) lands failure.

5. logging in system by user according to claim 4 is characterized in that, also comprises server sequence sets module (307) in the said server consistency check module (306), said server sequence sets module (307) Store Credentials chain.

6. an employing user collaborative system according to claim 1 or claim 2 based on the Verification System of trust negotiation; It is characterized in that; Comprise at least two line modules, each line module includes the users to trust negotiation module of oneself, and each line module connects mutually through network;

User's first and user's second connect, and user's second is returned user's first information, and the information that user's first strategy analyzing module (601) the judges second in user's first trust negotiation module (60) is returned is strategy or certificate;

If strategy is then resolved it; See and whether relate to the owned responsive certificate of user's first; If analysis result relates to the owned responsive certificate of user's first; Then user's first strategy analyzing module (601) notifies user's first strategy processing module (602) to handle; User's first strategy processing module (602) accesses the protection strategy about responsive certificate in user's first policy library module (604), returns to the protection strategy of user's second trust negotiation module (70) about responsive certificate, if the analysis result of user's first strategy analyzing module (601) does not relate to responsive certificate; Then user's first strategy analyzing module (601) notifies user's first certificate processing module (603) to handle; The access control policy that user's first certificate processing module (603) is sent according to user's second accesses the certificate that strategy that the user's second in user's first certificate repository module (605) sends relates to, and returns to user's second trust negotiation module (70);

If the information that user's first strategy analyzing module (601) judges second is returned is certificate; Then notify user's first certificate processing module (603) to handle, the certificate that user's first certificate processing module (603) is returned user's second is saved in user's first consistency check module (606), and whether the requirement of the strategy that before this certificate of user's first consistency check module (606) verification and the user's first user's second is proposed is consistent; If it is consistent; Both sides' relation of breaking the wall of mistrust then, user's second can be worked in coordination with interchange with user's first, understands the sensitive information that has separately; Otherwise inform user's second negotiation failure, both sides can not set up collaborative the connection.

7. a login method that adopts the logging in system by user of claim 1 or 2 described Verification Systems based on trust negotiation is characterized in that, may further comprise the steps:

User log-in block sends to user profile such as user's its own user name and password in the user login management module, and proposes access request;

User profile in the user login management module searching user's information memory module; User profile is carried out verification; The verification failure informs that then user log-in block login failure, verification succeeds then send access request to the server policy processing module, the access request that the server policy processing module is sent according to the user login management module; According to the user gradation information in the user gradation administration module; From the server policy library module, access corresponding strategy, return to the users to trust negotiation module, and strategy is kept in the server consistency check module;

The strategy that subscriber policy parsing module reception server strategy processing module in the users to trust negotiation module is returned; Give the user certificate processing module; The user certificate processing module requires from the user certificate library module, to search corresponding certificate according to strategy; Form certificate chain, and certificate chain is sent to the server certificate processing module, the server certificate processing module is deposited into certificate chain in the server sequence sets in the server consistency check module according to order;

The strategy that server consistency check module is preserved the certificate chain and the server policy processing module of the preservation of server certificate processing module carries out verification; Both are consistent; Inform that then user log-in block consults successfully; User log-in block can be visited accordingly, otherwise informs that the user lands failure.

8. a Synergistic method that adopts the user collaborative system of claim 1 or 2 described Verification Systems based on trust negotiation is characterized in that, may further comprise the steps:

The information that user's first strategy analyzing module judges second in user's first trust negotiation module is returned is strategy or certificate;

If strategy; User's first strategy analyzing module is resolved it; See and whether relate to the owned responsive certificate of user's first; If analysis result relates to the owned responsive certificate of user's first, then user's first strategy analyzing module notifies user's first strategy processing module to handle, and user's first strategy processing module accesses the protection strategy about responsive certificate in user's first policy library module; Return to the protection strategy of user's second trust negotiation module about responsive certificate; If analysis result does not relate to the owned responsive certificate of user's first, then user's first strategy analyzing module notifies user's first certificate processing module to handle, the access control policy that user's first certificate processing module is sent according to user's second; Access the certificate that strategy that the user's second in user's first certificate repository module sends relates to, return to user's second trust negotiation module;

If certificate; User's first strategy analyzing module notifies user's first certificate processing module to handle, and the certificate that user's first certificate processing module is returned user's second is saved in user's first consistency check module, and whether the requirement of the strategy that before this certificate of user's first consistency check module verification and the user's first user's second is proposed is consistent; If it is consistent; Both sides' relation of breaking the wall of mistrust then, user's second can be worked in coordination with interchange with user's first, understands the sensitive information that has separately; Otherwise inform user's second negotiation failure, both sides can not set up collaborative the connection.

Images