Method for controlling user access permission in cloud platform

Abstract

The invention discloses a method for controlling user access permission in a cloud platform. The method comprises the steps that S1. a system administrator or a super user distributes the user right to an object i for each user, and the owner of the object i distributes the object access right to the object i for each user; S2. when a user j requests a cloud platform server to conduct certain operation on the object i, the server judges whether the user j has the user right to conduct the operation on the object i or not, if so, go to step S3, and if not, reject the operation request of the user j; and S3. the server judges whether the user j has the object access right to the object i or not, if so, accept the operation request of the user j, and if not, reject the operation request of the user j. According to the method, the access of different users to the object can be controlled and separated in the cloud platform, and dual protection on the confidential information of a common user can be realized by utilizing a VPN (virtual private network).

Description

technical field [0001] The invention relates to the technical field of cloud computing, in particular to a method for controlling user access rights in a cloud platform. Background technique [0002] Cloud computing is the growth, usage and delivery model of Internet-based related services, usually involving the provision of dynamically scalable and often virtualized resources over the Internet. With the help of virtualization technology, cloud computing can integrate computing resources distributed in different regions and realize the sharing of infrastructure resources. At the same time, users can use different terminal devices to realize access to network resources through standard applications, making access to network resources ubiquitous. [0003] While cloud computing and cloud platforms provide users with great convenience, the accompanying information security and privacy protection issues have always been the focus of the industry's attention and solutions. Among...

AI Technical Summary

Problems solved by technology

[0007] 1. Coarse-grained authorization control: The management interface of cloud services tends to provide an over-coarse-grained authorization control model. Therefore, standard security measures such as separation of duties cannot be implemented, because this method cannot only provide users with those Just enough authority to carry out their work;

[0008] 2. The system administrator is the authorizer of all user permissions. He has all permissions at the same time, so he can access the object resources of ordinary users, so that the specific object resources of ordinary users cannot be effectively protected

Images