Cloud resource access control method based on dynamic cross-domain security token

Abstract

The invention discloses a cloud resource access control method based on a dynamic cross-domain security token. The method includes that 1) an access agent is preset on a cloud resource service providing party and requests a dynamic security token for each dynamic temporary user to the cloud resource providing party; 2) the cloud resource providing party generates the dynamic security token, sets the access strategy and transmits the strategy to the dynamic temporary users; 3) a sharing secrete key is respectively set between each dynamic temporary user and the cloud resource providing party; 4) the dynamic temporary users conduct signing on the access request through the sharing secrete key and transmit the authentication request news to the cloud resource providing party; and 5) the cloud resource providing party conducts signing on the authentication request news through the sharing secrete key, authentication passes if signatures are identical, the access strategy of the dynamic security token and the access agent is judged, and the access request of the dynamic temporary users is responded according to judgment results. The method achieves the high-efficiency cross-domain authentication mechanism and is high in judgment efficiency.

Description

technical field [0001] The invention belongs to the field of access control in information security, and in particular relates to a cloud resource access control method based on a dynamic cross-domain security token. Background technique [0002] With the emergence and wide application of cloud computing technology, its cross-domain and heterogeneous characteristics make the original resource sharing mode change to resource consumption mode. Among cloud resource consumers, there are not only a large number of users who use cloud resources for a long time, but also some dynamic temporary users who occasionally access cloud resources. In recent years, some scientific research institutions and enterprises have proposed corresponding solutions for the above-mentioned development trend of cloud resources. [0003] OpenID is a decentralized network identity authentication system. It identifies and authenticates network users through Uniform Resource Identifiers (URLs). It separat...

AI Technical Summary

Problems solved by technology

For example, its signature authentication process is more complicated

In addition, Amazon does not consider the session key for secure communication between users and cloud resource service providers, so the secure transmission of confidential information cannot be guaranteed

Finally, the access control policy for dynamic temporary users is not set

Images