基于混合算法的互联网访问用户身份认证方法

A hybrid algorithm based authentication method for internet access users

提出基于混合算法的互联网访问用户身份认证方法,结合域内联盟链和跨域联盟链,建立教育区块链身份认证框架。在认证架构中设置固定的权威节点后,结合无证书签名以及哈希函数,完成机构节点、用户节点的合理注册。建立基于混合算法的安全认证机制,首先应用国密算法中的SM4算法(SM4分组密码算法)产生一个初始密钥;然后利用SM2算法(SM2椭圆曲线公钥密码算法)对密钥数据进一步处理,获取可以用于身份认证的随机密钥;最后,以云计算为核心的认证服务器的作用下,对互联网访问用户身份进行阶段认证。实验结果表明,在并发用户数量为300时,所提方法的互联网访问用户身份认证响应时间仅为2.85 s,满足实时性要求。

A hybrid algorithm based internet access user identity authentication method is proposed.Establish an education blockchain identity authentication framework by combining intra domain and cross domain alliance chains.After setting a fixed authoritative node in the authentication architecture,combined with certificateless signature and hash function,complete the reasonable registration of institutional nodes and user nodes.Establish a security authentication mechanism based on a hybrid algorithm.First,use the SM4 algorithm(SM4 Block cipher algorithm)in the national security algorithm to generate an initial key,and use the SM2 algorithm(SM2 elliptic curve public key cryptography algorithm)to further process the key data to obtain a random key that can be used for identity authentication.Finally,under the role of an authentication server centered on cloud computing,stage authentication is performed on the identity of internet access users.The experimental results show that when the number of concurrent users is 300,the proposed method only has a response time of 2.85 seconds for internet access user authentication,meeting the real-time requirements.