云电子身份管理与认证系统中的关键技术优化改进

Optimization improvement of key technology of cloud electronic identity management and authentication system

当前的身份管理认证技术存在风险高、数据库储存效率低、认证错误率高等弊端。因此,提出一种云电子身份管理认证系统,系统主要由认证服务器、系统服务器与云访问服务器组成。认证服务器中的控制代理模块截取用户对资源服务器请求认证的数据信息,并将数据信息发送到认证服务模块进行身份认证。用户进入到信息数据库中后,通过系统服务器中的RSA模块,对用户所需文件进行加密解密处理,依靠用户私钥和认证令牌实现身份认证,将数据信息上传到云访问服务器进行存储和传递,完成整个云电子身份管理与认证。给出RSA模块中的部分功能函数和文件加密解密流程图,以及RSA模块进行身份认证过程中的大数乘法和大数模幂运算过程。实验结果表明,提出身份管理和认证系统耗能低、认证效率高,具有较高的数据处理精度。

There are high risk, low efficiency of database storage, high authentication error rate in the current identity management authentication technology. Therefore, a cloud electronic authentication management system is proposed. This system is mainly composed of authentication server, system server and cloud access server. The control agent module in the authentication server intercepts the data information that the user requests for authentication by resource server, and sends the data information to the certification service module. When the user enters into the information database, the files required by the user are encrypt- ed and decrypted by the RSA system server module. The identity authentication relies on the user＇s private key and authentication token. The data information is uploaded to the cloud access server for storage and transmission to complete the entire cloud electronic identity management and authentication. Partial functions, flow charts of file encryption and decryption in RSA module, as well as the power operation process of large numbers multiplication and large mathematical model in the verification process of RSA module are given in this paper. The experimental results shows that proposed identity management and authentication system has low energy consumption, high efficiency and high precision of data processing.