混合云环境下高效异构跨域身份认证方案研究  

Research on efficient heterogeneous cross domain identity authentication scheme in hybrid cloud environment

作　　者：李强 赵峰 张茜 宋卫平 高胜杰 LI Qiang;ZHAO Feng;ZHANG Qian;SONG Weiping;GAO Shengjie(State Grid Information and Communication Industry Group Co.,Ltd.,Beijing 102200,China;Sichuan Aostar Information Technologies Co.,Ltd.,Chengdu 611730,China)

机构地区：[1]国网信息通信产业集团有限公司,北京102200 [2]四川中电启明星信息技术有限公司,四川成都611730

出　　处：《电子设计工程》2024年第23期186-190,共5页Electronic Design Engineering

基　　金：江苏省通品牌专业建设项目(Z215015002)。

摘　　要：混合云环境存在多个接收末端,在异构跨域身份认证时受到不同攻击手段影响,导致身份认证耗时较长。为此,提出混合云环境下高效异构跨域身份认证方案研究。构建高效异构跨域身份认证模型,实现异构跨域信任连接。确定随机验证参数,建立异构跨域身份并认证。评估认证节点可靠性,避免受到攻击影响而延长认证时间。根据用户计算代理授权证书和有效授权文件,生成代理签名密钥,通过云间第三方代理,完成异构跨域身份的认证。由实验结果可知,该方案在迂回攻击下总耗时最短,时间为3 s,能够达到高效认证的目的。Due to the presence of multiple receiving terminals in a hybrid cloud environment,identity authentication is affected by different attack methods in heterogeneous cross domain authentication,resulting in a longer authentication time.To this end,an efficient heterogeneous cross domain identity authentication scheme in a hybrid cloud environment is proposed.Build an efficient heterogeneous cross domain identity authentication model to achieve heterogeneous cross domain trust connections.Determine random verification parameters,establish heterogeneous cross domain identities,and authenticate.Evaluate the reliability of authentication nodes to avoid being affected by attacks and extend authentication time.Generate proxy signature keys based on user computing proxy authorization certificates and valid authorization files,and complete heterogeneous cross domain identity authentication through cloud based third-party proxies.The experimental results show that this scheme has the shortest total time under roundabout attacks,with a time of 3 seconds,and can achieve the goal of efficient authentication.

关 键 词：混合云环境 高效异构跨域 身份认证 代理签名 

分 类 号：TN102[电子电信—物理电子学]