Method and system for dynamically establishing secure connection of virtual host in cloud computing environment

Abstract

The invention provides a method and a system for dynamically establishing secure connection of a virtual host in a cloud computing environment. According to the method and the system, in the cloud computing environment, nodes of a zero-credibility user virtual host are accessed into a virtual network, and a virtual IP (Internet Protocol) address is obtained through a credibility certification server; and the credibility certification server is used for carrying out strategy-based credible identity certification on the nodes of a source virtual host and a target virtual host, matching the security levels of the nodes of the source and target virtual hosts and assigning the type of an established secure connection protocol stack, and then, a source user virtual host can initiate secure connection establishment to a target user virtual host. According to the method and the system, the public online third-party credibility certification server is introduced in the cloud computing environment, so that the user virtual hosts with different service attributes and cross security domains dynamically establish the secure connection, and the problems that the conventional secure connection needs to be configured in advance, is established statically, is complicated in upgrading and maintenance, and the like are effectively solved. The method and the system have the advantages of simplicity, high efficiency, low cost and the like.

Description

technical field [0001] The invention relates to the field of communication and information security, in particular to a method and system for dynamically establishing secure connections between virtual hosts in a cloud computing environment. Background technique [0002] Establishing a secure connection between user virtual host nodes in a cloud computing environment is a major research topic. Traditional virtual host node secure connection establishment is often statically set manually through configuration files. In this mode, with virtual The growth of host scale, such as the creation of virtual hosts for new business types, virtual host migration, and virtual host withdrawal, will make it very difficult to maintain and manage secure connections to virtual hosts. There are some problems with traditional virtual host secure connection establishment: [0003] 1. There are large-scale user virtual hosts in the cloud computing environment. If user virtual host identity authe...

AI Technical Summary

Problems solved by technology

[0003] 1. There are large-scale user virtual hosts in the cloud computing environment. If user virtual host identity authentication is not performed, malicious virtual hosts will illegally access sensitive data resources in the cloud computing environment, resulting in illegal access to sensitive information

[0004] 2. Virtual hosts are manually established in advance and static IP addresses are set, and the establishment of secure connections between user virtual hosts is realized through configuration files. With the increase in the number of user virtual hosts and the change, deletion and creation of secure connections, Will make it difficult to maintain and manage secure connections between user virtual hosts

Images