WO2021114582A1 - Endogenous security user access authentication management system and method - Google Patents

Abstract

The present invention provides an endogenous security user access authentication management system and method, comprising: an input message discrimination distributor discriminates the message type of input incentive information to determine whether mimic arbitration is required, and if mimic arbitration is not required, directly sends the input incentive information to a non-mimic arbitration function executor for processing, and if mimic arbitration is required, sends the input incentive information to a mimic input agent and distributor; the mimic input agent and distributor copies and distributes same to a specified access authentication management system executor according to a distribution strategy; the specified executor executes parallel processing operations and outputs execution results to a mimic arbitration module; the mimic arbitration module runs a credible result discrimination algorithm according to the execution results to calculate credible output and sends the credible output to a mimic output agent module; an output message combiner is configured to receive the credible output sent by the mimic output agent module or the output from the non-mimic arbitration function executor and give an output response to the outside.

Description

Endogenously safe user access authentication management system and method Technical field

The present invention relates to the technical field of user access authentication management systems, in particular to an endogenously safe user access authentication management system and method.

Background technique

User access authentication management system BRAS system (Broadband Access Server/Broadband Remote Access Server) is a network communication device, a user access service device set at the network convergence layer, which is located at the edge of the backbone network Layer, can complete the data access of the user bandwidth IP/ATM network (currently the access method is mainly based on xDSL/Cable Modem/high-speed Ethernet technology (LAN)/wireless broadband data access (WLAN), etc.), realizing commercial buildings and Broadband Internet access for residents of the community, IP VPN services based on IPSec (IP Security Protocol), construction of intranets within the enterprise, and support for applications such as ISP wholesale business to users. Broadband access server mainly completes two functions:

1. Network bearer function: Responsible for processing the user's PPPoE (Point-to-Point Protocol Over Ethernet, which is a way to transmit PPP sessions on the Ethernet) to connect and aggregate user traffic.

2. Control realization function: cooperate with authentication system, billing system, customer management system and service strategy control system to realize user access authentication, billing and management functions.

The basic function of BRAS is to realize the management features and business initiation functions of broadband users, including user identification, authentication, billing, IP address management, security management, etc.

User access system: Receive the connection request initiated by the user terminal, extract the user name, password, physical location and other information from it, send the information to the AAA management system for authentication, and allow or deny the user to go online according to the authentication result.

AAA management system: According to conditions such as access restrictions, determine whether to allow users to access, and if allowed, authentication and authorization will be performed according to the AAA scheme.

Address allocation system: Assign IP addresses to access users.

Business management system: After the user goes online, the business management system and the AAA system work together to control the services used by the user, such as billing and QOS.

BRAS plays a pivotal role in operator networks, especially in China, where fixed-line broadband services stand out and continue to grow globally.

The new share each year and the stock data show that China's broadband business has a huge market space. The BRAS, as a life gate device, is of vital importance to operators.

At present, there are users accessing authentication management, and the location is more important, but it cannot guarantee the security of the system, nor can it guarantee that there is no loophole backdoor.

Summary of the invention

In view of the problems and deficiencies in the prior art, the present invention provides a new endogenously safe user access authentication management system and method.

The present invention solves the above technical problems through the following technical solutions:

The present invention provides an endogenously safe user access authentication management system, which is characterized in that it includes an input message discrimination distributor, a mimic input agent and distributor, a set of mimic judgment function executive bodies, a non-mimic judgment function executive body, and mimics An arbitration module, a mimic output proxy module, and an output message combiner, the set of mimic arbitration function executive bodies includes a plurality of functionally equivalent heterogeneous access authentication management system executive bodies;

The input message discriminating distributor is used to discriminate the message type of the received input incentive information to determine whether mimic judgment is required. When the input incentive information is a message that does not require mimic judgment, the input incentive information is directly sent to Non-mimic judgment function executive body processing, when the input incentive information is a message that needs mimic judgment, the input incentive information is sent to the mimic input agent and distributor;

The mimic input agent and distributor are used for copying and distributing to a designated access authentication management system executive body according to a distribution strategy;

The specified access authentication management system executive body is used to execute parallel processing operations, and output the execution result to the mimic judgment module;

The mimic judgment module is used to run a credible result discrimination algorithm to calculate a credible output based on each execution result, and send the credible output to the mimic output proxy module;

The output message combiner is used to receive the trusted output or the output of the non-mimic judgment function executive sent by the mimic output agent module and perform external output response.

Preferably, the user access authentication management system further includes a negative feedback controller, and the mimic judgment module is used to send the mimic judgment result to the negative feedback controller, and when it is found that the trusted output is an untrusted operation result, the The corresponding event is reported to the alarm processing in the negative feedback controller.

Preferably, the negative feedback controller is used to record the result of statistical mimicry judgment, and according to the control parameters and ruling parameters set by the user, determine the dynamic scheduling of the executive body of the access authentication management system, and perform the execution of the executive body of the access authentication management system. Shutdown, reorganization, reconfiguration and initialization operations.

The present invention also provides an endogenously safe user access authentication management method, which is characterized in that it includes the following steps:

S1. The input message discrimination distributor judges the message type of the received input incentive information to determine whether mimic judgment is required. If the input excitation information is a message that does not require mimic judgment, then step S6 is entered. If incentive information is input If it is a message that needs to be mimicked, then go to step S2;

S2. The input incentive information is sent to the mimic input agent and distributor, and the mimic input agent and distributor are copied and distributed to the designated access authentication management system executive body according to the distribution strategy;

S3. The designated access authentication management system executive body executes parallel processing operations, and outputs the execution result to the mimic judgment module;

S4. The mimic judgment module runs the credible result discrimination algorithm to calculate the credible output according to each execution result, and sends the credible output to the mimetic output agent module;

S5. The mimic output proxy module sends the trusted output to the output message combiner, and then goes to step S7;

S6. Directly send the input incentive information to the non-mimicry adjudication function executive body for processing, and proceed to step S7;

S7. The message combiner receives the trusted output sent by the mimic output agent module or the output of the non-mimic judgment function executive body and responds to external output.

Preferably, the mimic judgment module sends the mimic judgment result to the negative feedback controller, and reports the corresponding event to the negative feedback controller for alarm processing when the credible output is found to be an untrusted operation result.

Preferably, the negative feedback controller records the statistical mimic ruling results, and determines the dynamic scheduling of the access authentication management system executive body according to the control parameters and ruling parameters set by the user, and closes and reorganizes the access authentication management system executive body , Reconfiguration and initialization operations.

On the basis of conforming to common knowledge in the field, the above-mentioned preferred conditions can be combined arbitrarily to obtain preferred embodiments of the present invention.

The positive and progressive effects of the present invention are:

The present invention provides an endogenously safe BRAS control system. Compared with the existing control system, it has stronger anti-attack ability. If a single control system has loopholes, it is set to be untrustworthy through a mimic ruling algorithm. The output results of the two control systems, thereby defending against attacks.

By adopting the principle of mimicry technology, the invention enables users to access the authentication management system with an endogenous safety mechanism, and reduces or even solves the problems of vulnerability and vulnerability of the overall system caused by network security threat factors such as loopholes/backdoors. When a certain executive body control system has network security risks, the overall system of user access authentication management remains stable and reliable, and will not be affected. While reducing the network security risks of a single executive body, it also improves the reliability of the overall system.

Description of the drawings

Figure 1 is a system diagram of an existing user access authentication management system;

2 is a structural diagram of the user access authentication management system with endogenous security corresponding to the present invention;

Fig. 3 is a flowchart of a user access authentication management method with endogenous security corresponding to the present invention.

Detailed ways

In order to make the objectives, technical solutions, and advantages of the embodiments of the present invention clearer, the following will clearly and completely describe the technical solutions in the embodiments of the present invention with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments These are a part of the embodiments of the present invention, but not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative work shall fall within the protection scope of the present invention.

As shown in Figure 2, this embodiment provides an endogenously secure user access authentication management system, which includes an input message discrimination distributor, a mimic input agent and distributor, a set of mimic judgment function executive bodies, and a non-mimic judgment function execution The set of mimic judgment function executive bodies includes multiple functionally equivalent heterogeneous access authentication management system executive bodies, such as a mimic judgment module, a mimic output proxy module, an output message combiner, and a negative feedback controller. The access authentication management system executive body 1, the access authentication management system executive body 2, ... the access authentication management system executive body N in FIG.

The input message discriminating distributor is used to discriminate the message type of the received input incentive information to determine whether mimic judgment is required. When the input incentive information is a message that does not require mimic judgment, the input incentive information is directly sent to The non-mimic judgment function executes body processing, and when the input incentive information is a message that requires mimic judgment, the input incentive information is sent to the mimic input agent and distributor.

The mimic input agent and distributor are used for copying and distributing to the designated access authentication management system executive body according to the distribution strategy.

The specified access authentication management system executive body is used to execute parallel processing operations and output the execution result to the mimic judgment module.

The mimic judgment module is used to run a credible result discrimination algorithm to calculate a credible output according to each execution result, and send the credible output to the mimic output proxy module.

The output message combiner is used to receive the trusted output or the output of the non-mimic adjudication function executive sent by the mimic output agent module and perform external output response.

The mimic judgment module is used to send the mimic judgment result to the negative feedback controller, and report the corresponding event to the negative feedback controller for alarm processing when the credible output is found to be an untrusted operation result.

The negative feedback controller is used to record the results of statistical mimicry ruling, and according to the control parameters and ruling parameters set by the user, determine the dynamic scheduling of the access authentication management system executive body, and close, reorganize, and reorganize the access authentication management system executive body. Reconfiguration and initialization operations.

The first deployment form, as shown in Figure 3, retains part of the BRAS control system's functions in the access authentication management system non-mimesis adjudication function set, and does not use mimetic control. Another part of the function adopts the framework of mimicry technology to deploy.

Input incentives are typed in the "input message discrimination distributor". If the corresponding one does not require mimic judgment, enter the "access authentication management system non-mimic judgment function executive body" processing, and after processing, pass the "output message combination器” output. Another part of the function adopts mimic judgment, which is distributed to multiple functionally equivalent heterogeneous “access authentication management system executive bodies” through the “mimic input agent and distributor” for parallel processing, and the “mimic judgment” module collects the judgment results of the executive bodies. After arbitration, it will be output to the "Mimic Output Agent" module, and finally output through the "Output Message Combiner".

In another form of deployment, all BRAS functions are implemented using mimic technology. That is, the input incentive is directly cut to the "mime input agent and distributor" in the "input message discrimination distributor", and it is distributed to multiple functionally equivalent heterogeneous "access authentication management system executive bodies" for parallel processing. The mimic judgment module collects the judgment result of the executive body, and outputs it to the mimic output agent module after judgment, and finally outputs it through the “output message combiner”.

This embodiment provides an endogenously secure user access authentication management method, which includes the following steps:

S1. The input message discrimination distributor judges the message type of the received input excitation information to determine whether mimic judgment is required. If the input excitation information is a message that does not require mimic judgment, then go to step S6, if incentive information is input If it is a message that needs to be mimicked, then go to step S2;

S2. The input incentive information is sent to the mimic input agent and distributor, and the mimic input agent and distributor are copied and distributed to the designated access authentication management system executive body according to the distribution strategy;

S3. The designated access authentication management system executive body executes parallel processing operations, and outputs the execution result to the mimic judgment module;

S4. The mimic judgment module runs the credible result discrimination algorithm to calculate the credible output according to each execution result, and sends the credible output to the mimetic output agent module;

S5. The mimic output proxy module sends the trusted output to the output message combiner, and then goes to step S7;

S6. Directly send the input incentive information to the non-mimicry adjudication function executive body for processing, and proceed to step S7;

S7. The message combiner receives the trusted output sent by the mimic output proxy module or the output of the non-mimic arbitration function executive body and makes an external output response.

Please refer to Figure 3 for the specific message mimicry processing flow.

The output stimulus first judges the message type in the "input message discrimination distributor" to determine whether a mimic judgment is required.

If it is a message that does not require mimicry ruling, it is directly sent to the non-mimicking ruling function executive body of the access authentication management system for processing.

If it is a message that requires mimicry judgment, it is sent to the "input agent and distributor", and is copied and distributed to the designated executive body for processing according to the distribution strategy.

Access authentication management system executive bodies 1, 2...k are functionally equivalent heterogeneous executive bodies. The heterogeneity can be multi-level heterogeneity, such as CPU instruction system heterogeneity, X86, ARM, PPC, or The heterogeneity of the operating system level, such as windows, ubuntu, centos, etc., can also be the heterogeneity of coding languages and compilers.

After the parallel processing of functionally equivalent heterogeneous executors is completed, the results are output to the "Mimic Judgment" module to run the credible result discrimination algorithm (the specific algorithm can be different during implementation, for example, different weights can be assigned to each control system, and the operation result The weighting is based on the weight, or simply according to the principle that the minority obeys the majority), and according to the output results of each executive body, the discriminant algorithm calculates the credible output.

The mimic judgment module sends the trusted output to the "mimic output agent" module, and the output agent sends it to the "output message combiner" for external output response.

At the same time, the "Mimic Judgment" module sends the mimic judgment result to the "Negative Feedback Controller". If an untrusted calculation result is found, the corresponding event (corresponding control system information, message information, etc.) is reported to the "Negative Feedback Control" Alarm handling in the "device".

The "negative feedback controller" records the statistical mimic judgment results, and according to the control parameters and judgment parameters set by the user, determines the dynamic scheduling of the executive body, and performs operations such as shutdown, reorganization, reconfiguration, and initialization of the executive body.

The user access authentication management system of the present invention has the following characteristics:

1. Heterogeneity: Deploy different types of heterogeneous software and hardware at different levels.

2. Redundancy: For the same request, multiple different software and hardware are used to execute the request at the same time, and the result is voted to achieve redundancy operation.

3. Dynamic: According to scheduling strategy or feedback from threat perception, convergently replace the heterogeneous executors in the current service set, increasing the uncertainty of the system operation scenario.

By adopting the principle of mimicry technology, the invention enables users to access the authentication management system with an endogenous safety mechanism, and reduces or even solves the problems of vulnerability and vulnerability of the overall system caused by network security threat factors such as loopholes/backdoors. When a certain executive body control system has a network security risk, the overall system of user access authentication management remains stable and reliable, and will not be affected. While reducing the network security risk of a single executive body, it also improves the reliability of the overall system.

Although the specific embodiments of the present invention are described above, those skilled in the art should understand that these are only examples, and the protection scope of the present invention is defined by the appended claims. Those skilled in the art can make various changes or modifications to these embodiments without departing from the principle and essence of the present invention, but these changes and modifications all fall within the protection scope of the present invention.

Claims (6)

1. An endogenously secure user access authentication management system, which is characterized in that it includes an input message discrimination distributor, a mimic input agent and distributor, a set of mimic judgment function executive bodies, a non-mimic judgment function executive body, a mimic judgment module, A mimic output proxy module and an output message combiner, the set of mimic adjudication function executive bodies includes a plurality of functionally equivalent heterogeneous access authentication management system executive bodies;

   The input message discriminating distributor is used to discriminate the message type of the received input incentive information to determine whether mimic judgment is required. When the input incentive information is a message that does not require mimic judgment, the input incentive information is directly sent to Non-mimic judgment function executive body processing, when the input incentive information is a message that needs mimic judgment, the input incentive information is sent to the mimic input agent and distributor;

   The mimic input agent and distributor are used for copying and distributing to a designated access authentication management system executive body according to a distribution strategy;

   The specified access authentication management system executive body is used to execute parallel processing operations, and output the execution result to the mimic judgment module;

   The mimic judgment module is used to run a credible result discrimination algorithm to calculate a credible output based on each execution result, and send the credible output to the mimic output proxy module;

   The output message combiner is used to receive the trusted output or the output of the non-mimic judgment function executive sent by the mimic output agent module and perform external output response.
2. The endogenously secure user access authentication management system according to claim 1, wherein the user access authentication management system further comprises a negative feedback controller, and the mimic judgment module is used to send the mimic judgment result to The negative feedback controller reports the corresponding event to the negative feedback controller for alarm processing when it finds that the credible output is an uncredible calculation result.
3. The endogenously secure user access authentication management system according to claim 2, wherein the negative feedback controller is used to record statistical mimicry ruling results, and determine the access based on the control parameters and ruling parameters set by the user The dynamic scheduling of the executive body of the authentication management system is to close, reorganize, reconfigure and initialize the executive body of the access authentication management system.
4. An endogenously safe user access authentication management method, which is characterized in that it includes the following steps:

   S1. The input message discrimination distributor judges the message type of the received input excitation information to determine whether mimic judgment is required. If the input excitation information is a message that does not require mimic judgment, then go to step S6, if incentive information is input If it is a message that needs to be mimicked, then go to step S2;

   S2. The input incentive information is sent to the mimic input agent and distributor, and the mimic input agent and distributor are copied and distributed to the designated access authentication management system executive body according to the distribution strategy;

   S3. The designated access authentication management system executive body executes parallel processing operations, and outputs the execution result to the mimic judgment module;

   S4. The mimic judgment module runs the credible result discrimination algorithm to calculate the credible output according to each execution result, and sends the credible output to the mimetic output agent module;

   S5. The mimic output proxy module sends the trusted output to the output message combiner, and then goes to step S7;

   S6. Directly send the input incentive information to the non-mimicry adjudication function executive body for processing, and proceed to step S7;

   S7. The message combiner receives the trusted output sent by the mimic output proxy module or the output of the non-mimic arbitration function executive body and makes an external output response.
5. The endogenously secure user access authentication management method according to claim 4, wherein the mimic judgment module sends the mimic judgment result to the negative feedback controller, and when it finds that the trusted output is an untrusted operation result, it will correspond to The event is reported to the alarm processing in the negative feedback controller.
6. The endogenously secure user access authentication management method of claim 5, wherein the negative feedback controller records the statistical mimic judgment result, and decides to access the authentication management system according to the control parameters and the ruling parameters set by the user The dynamic scheduling of the executive body is to close, reorganize, reconfigure and initialize the executive body of the access authentication management system.

Images