| 摘要 |
Disclosed in embodiments of the present invention are a method and device for authenticating identity of a node in a distributed system. The method comprises: establishing a primitive library, wherein the primitive library is a set of authentication primitives, the authentication primitives are statements representative of uniqueness of nodes to be authenticated and satisfy a preset semantic rule of the nodes to be authenticated; generating a primitive semantic library according to the primitive library; when an identity authentication is required to be performed by a node executing the authentication on the node to be authenticated, selecting, by the node to be authenticated, one target authentication primitive from the primitive library, and sending the target authentication primitive to the node executing the authentication; when the node executing the authentication receives the target authentication primitive, extracting a semantics from the target authentication primitive as a target semantics, and verifying whether the target semantics is present in the primitive semantic library; if so, determining that the identity authentication of the node to be authenticated passes, and if not, determining that the identity authentication of the node to be authenticated fails. The technical solution disclosed in the embodiments of the present invention is high in security, easy to implement, and lightweight, and can realize authentication on demand. |
