WO2005057845A1

WO2005057845A1 - The safe verify method between the manager and the proxy in network transmission

Info

Publication number: WO2005057845A1
Application number: PCT/CN2004/001425
Authority: WO
Inventors: Muhong Zhu; Ruijie Zhou; Qiang Wu; Bangqing Li
Original assignee: Huawei Technologies Co., Ltd.
Priority date: 2003-12-10
Filing date: 2004-12-07
Publication date: 2005-06-23
Also published as: CN1627680A

Abstract

The present invention relates to the safe verify method in network, discloses a method by which the manager and the proxy can verify each other safely in network transmission, makes the user manage system of each proxy independent with the manager system and improves the maintenance of the security system and the manage efficiency. The method by which the manager and the proxy can verify each other safely in network transmission includes following steps: A. the proxy determines the encrypted ciphertext and transmits the encrypted ciphertext to the manager; B. said manager encrypts the encrypted ciphertext with the third algorithm and transmits it to the proxy; C. said proxy decrypts the received ciphertext with the inverted altorithm of the third algorithm; D. said proxy determines if the verify is passed by comparing the decrypted ciphertext and the encrypted ciphertext.

Description

Method for mutual security check between manager and agent in network transmission

Technical field

The present invention relates to a method for security verification in a network, and in particular, to a method for mutual security calibration between managers and agents.

Background technique

In recent years, various communications, media and computer network technologies have made great progress, and the rapid development of network technologies is even more remarkable. The high speed, openness, and integration of modern networks determine the importance and complexity of modern network management and control systems. Since the concept of the intelligent network architecture was proposed by the International Telecommunication Union in 1992, intelligent network management and control technology has become popular and has become an effective means to solve the management and control problems of modern networks. The existing network management and control architecture uses a system management model of remote monitoring and logical management. Specifically, the core of the system management model is a pair of system management entities: a manager and an agent, which are interconnected through a management communication protocol. The manager is the entity that manages the management process of the system, and the agent is the peer process entity in the managed system. The manager issues a management operation command to the agent, and the agent is responsible for accessing the managed objects in the management information database managed by the manager, executing the operation command issued by the manager, and reporting the operation result to the manager. In addition, when an event that needs to be understood by the manager occurs in time for the managed object, the agent will actively pass the notification of the managed object to the manager. The transmission of related operation commands, operation results, and notifications depends on relevant standard communication protocols, such as the Open System Interconnect Reference Model (OS I for short), Transmission Control Protocol / Internet Protocol ( Transfer Control Protocol / International Protocol (known as "TCP / IP"). However, in most cases, the role of a management node is not absolute and will change between the manager and the agent. For example, when a management node issues an operation command to another management node, it is a manager; and when it accepts an operation command from another management node, it is an agent. Therefore, the manager and the agent can also be regarded as two roles of a management entity. The management entity composed of the roles of the manager and the agent has the following characteristics: First, it can take the role of manager. Issuing orders or requests; the second is follower, which can accept commands or requests in the role of agent to complete specified tasks; the third is awareness, the agent can discover the exception of the managed object and report it To the manager; the fourth is collaboration, when the agent executes the manager's order or request, the agent can then transfer some or all of the tasks to other agents as the manager and ask them to assist in the completion; the fifth is communication, The manager and the agent communicate through a standard communication protocol. When the manager needs to operate a remote managed object, the manager issues an operation command to the agent where the managed object is located, and the agent specifically accesses the managed object. The result of the visit is reported by the agent to the manager through a communication protocol. In practical applications, the security management part of the network management system appears to be particularly important. If data is maliciously captured or tampered with during the transmission process, theoretically a highly functional and efficient system is worthless in practice. Generally speaking, most telecommunication network element management systems (Elastic Management System, or "EMS" for short) play the role of manager, and network elements play the role of agent, and they interact through custom protocols. The EMS acts as a client and the network element acts as the server. The manager must first log in to the agent, then enter the user name and password, and then perform subsequent management after authentication. Finally, the agent is responsible for verifying the correctness. In practical applications, the above solution has the following problems: first, the user management system of each agent cannot exist independently of the manager system; second, the problem of the complexity of the manager system cannot be solved; third, it cannot Solve the problem that illegal users can steal user names and passwords through the network. The main reason for this is that, first of all, managers use The user and password information is part of the agent's security management information. If an agent modifies its own security management information, such as modifying or deleting a user, the administrator must be notified to make the corresponding changes before the follow-up can be performed. Management. This system management method inevitably leads to the existence of an agent's user management system depending on the manager system. Secondly, the method that one manager manages multiple agents is currently more commonly used, and the passwords and passwords of each agent are different. In this way, the manager must save and record the passwords and passwords of all these agents. The direct result is It is because the complexity of security management is too high, which not only increases the workload of maintenance, but also reduces the security of the system.

Third, at present, in some occasions, when the administrator logs in to the agent, the user name and password are often directly transmitted in plain text. Once captured by the criminal, they can be used to log in to the agent for tampering, deletion, and other damage Sexual operation, thus increasing unsafety.

SUMMARY OF THE INVENTION In view of this, the main object of the present invention is to provide a method for mutual security verification between managers and agents in network transmission, so that each agent's user management system can exist independently of the manager system, improving security The maintainability of the system improves management efficiency. To achieve the above objective, the present invention provides a method for mutual security verification between a manager and an agent in network transmission, including the following steps:

A agent determines the encrypted ciphertext and sends the encrypted ciphertext to the manager;

B said manager uses a third algorithm to encrypt said encrypted ciphertext and sends it to said agent;

C. The agent uses the reverse algorithm of the third algorithm to decrypt the received ciphertext;

D The agent determines whether the identity check passes by comparing whether the decrypted ciphertext and the encrypted ciphertext are equal. The step A further includes: the agent adds the encrypted ciphertext using the first algorithm The step B further comprises: the manager decrypts the received dense secret using a reverse algorithm of the first algorithm. Furthermore, the encrypted cipher text described in step A is a random number generated by the agent. The third algorithm and the first algorithm are different algorithms. Actually, the third algorithm is a custom simple algorithm, or a data encryption standard algorithm, or a very small encryption algorithm. The first algorithm may also be a custom simple algorithm, or a data encryption standard algorithm, or a very small encryption algorithm. The manager described above is a telecommunications network element management system, and the agent is a network element. By comparison, it can be found that the technical solution of the present invention is different from the prior art in that, first, the technical solution of the present invention replaces the original authentication of the password with the process of verifying the security algorithm, unifying the managers and agents. In the login mode of each agent, the user management system of each agent can exist independently of the manager system, which simplifies the manager's security management mode. Secondly, the technical solution of the present invention implements two-way verification between the manager and the agent, which improves the security of the manager's connection with the agent, improves the verification speed, and increases the maintainability of the entire system. This technical solution difference brings relatively obvious beneficial effects. Specifically, in view of the first problem pointed out above, since the technical solution of the present invention enables the user management system of each agent to be independent of The manager system exists, so that agents and managers no longer rely on their respective security management systems. Aiming at the second problem pointed out above, the technical solution of the present invention makes the security management of the agent independent, so that the manager can save the need to save and record the password and password of each agent, thereby simplifying the security of the manager. Effect of management mode. In view of the third problem pointed out above, the technical solution of the present invention With the agent, a certain verification mechanism is used to ensure their permanent mutual trust, so that the security of the manager's connection with the agent is guaranteed, the speed is increased, and the entire system has good maintainability.

In practical applications, the technical solution of the present invention solves the shortcomings of the current EMS management system well, can simplify the security verification steps under the premise of ensuring security, and significantly improves the maintainability of the security system. Improving management efficiency has high practical value.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 is a schematic flowchart of mutual security verification between a manager and an agent in network transmission according to an embodiment of the present invention.

DETAILED DESCRIPTION To make the objectives, technical solutions, and advantages of the present invention clearer, the present invention will be described in further detail below with reference to the accompanying drawings. As shown in FIG. 1, in the process of mutual security verification between the manager and the agent according to an embodiment of the present invention, when the manager is ready to establish a connection with the agent, step 100 is first performed, and the manager sends the message to the agent. A connection request requires identity verification. The connection is usually initiated by the manager. This is because the manager's job is to issue management operation commands to the agent, and the agent is only responsible for accessing the managed objects in its own management information database and executing the operation commands issued by the manager. And return the operation result to the manager. This division of labor is determined by the system management model adopted by the network management and control architecture. Then step 110 is executed, and the agent generates a random number M after receiving the connection request sent by the manager. It should be noted that the generation of random numbers is generally generated by a random function. There is no fixed relationship between the generated random numbers. Even if they are captured during transmission, it is difficult for criminals to find the rules, and it is impossible to crack the acceptance of transmission. Encryption algorithm used by both parties. Thereafter, step 120 is performed, and the agent uses the first algorithm to generate the random number generated in the previous step.

M encrypts to obtain the first ciphertext, and then sends it to the manager. Among them, there are many kinds of algorithms used for encryption. You can choose some custom algorithms or use some standards. The encryption algorithm is, for example, the most typical data encryption standard algorithm (Da ta Encryption Standard, referred to as "DES"), or a very small encryption algorithm (Tiny Encryption Algor i thm, referred to as "TEA"). These algorithms are efficient, the key cylinder is short, and it is extremely difficult to decipher, and some are impossible to decipher under the existing technology, which effectively ensures the security of cipher text transmission. The first algorithm, like the third algorithm to be used below, requires the two parties to keep it strictly confidential. It should be noted that the first cipher text in step 120 may be determined by the agent and then sent directly to the manager, and directly proceeds to step 140 without encryption and decryption. Of course, the first ciphertext may also be agreed in advance by both parties. Then the process proceeds to step 130. After receiving the first ciphertext, the manager uses the reverse algorithm of the first algorithm to decrypt the first ciphertext to obtain the second ciphertext. Because the administrator needs to use a reverse algorithm to decrypt the received cipher text, the manager and the agent must fix the encryption algorithm to be used and the corresponding reverse algorithm before establishing a connection, so that they can be managed in the management. The agent and agent perform encryption and decryption respectively. Then it proceeds to step 140, which uses the third algorithm to encrypt the second ciphertext just decrypted again, and then transmits the obtained third ciphertext to the manager, and the agent executes step 150. In step 150, the agent decrypts the third ciphertext by using the reverse of the third algorithm and the fourth algorithm to obtain the fourth ciphertext. Those skilled in the art can understand that the relationship between the third algorithm and the fourth algorithm is the same as the relationship between the first algorithm and the second algorithm above. They are a pair of reciprocal algorithms, which makes the ciphertext M pass through the first algorithm. After four operations, the second algorithm, the third algorithm, and the fourth algorithm can be restored to the ciphertext M, the technical solution of the present invention uses this principle for verification. After that, step 160 is executed. The agent compares the calculated fourth ciphertext with the initial random number M. If they are equal, the check passes and sends a message to the manager to establish a connection. If they are not equal, the check fails and the connection is established. termination. It should be noted that the above entire process can actually be attributed to the relationship between managers and agents In the process of two-way verification between parties, this kind of calibration strictly guarantees the identity of both parties in the process of data transmission between the two parties in the future. In addition, encrypted random numbers are transmitted on the network. Even if they are captured maliciously, criminals cannot know how the encryption algorithms of both sides are implemented, so they have high security.

Although the present invention has been illustrated and described with reference to certain preferred embodiments of the present invention, those skilled in the art should understand that various changes can be made in form and details, and Without departing from the spirit and scope of the invention as defined by the appended claims.

Claims

Rights request

1. A method for mutual security calibration between a manager and an agent in network transmission, which is characterized by:

A agent determines the encrypted ciphertext and sends the encrypted ciphertext to the manager; B said manager uses a third algorithm to encrypt the encrypted ciphertext and sends it to the agent;

D The agent determines whether the identity check passes by comparing whether the decrypted ciphertext and the encrypted ciphertext are equal.

2. The method for mutual security verification between the manager and the agent in the network transmission according to claim 1, wherein the step A further comprises: the agent encrypts the encrypted cipher text using the first algorithm; The step B further includes: the manager decrypts the received ciphertext using a reverse algorithm of the first algorithm.

3. The method for securely calibrating a manager and an agent in a network transmission according to claim 1 or 2, wherein the encrypted cipher text in step A is a random number generated by the agent. .

4. The method for the manager and the agent to face-check each other securely during network transmission according to claim 2, wherein the first algorithm and the third algorithm are different algorithms.

5. The method for mutual security verification between the manager and the agent in the network transmission according to claim 1, wherein the third algorithm is a custom package algorithm, or a data encryption standard algorithm, or is extremely small Encryption Algorithm.

6. The method for mutual security verification between a manager and an agent in network transmission according to claim 1, wherein the first algorithm is a custom simple algorithm, or a data encryption standard algorithm, or a very small encryption algorithm.

7. The method for mutual security verification between a manager and an agent in network transmission according to claim 1, wherein the manager is a telecommunication network element management system, and the agent is a network element.