Application cloud safety certification method based on third-party service

Abstract

The invention provides an application cloud safety certification method based on a third-party service. The application cloud safety certification method based on the third-party service specifically comprises the steps that (1) a cloud user submits service demand information to a signature certification service cloud; (2) the signature certification service cloud receives the service demand information of the cloud user, and verifies validity of a certificate of the cloud user according to a third-party catalogue certification service cloud, carries out sign and issue on a ciphertext user login token and a digital envelope through an application portal catalogue service cloud, carries out certification service sign on the ciphertext user login token signed and issued through the application portal catalogue service cloud and the digital envelope signed and issued through the application portal catalogue service cloud, and sends the ciphertext user login token and the digital envelope back to the cloud user; (3) the cloud user carries out user sign on the obtained ciphertext user login token, the digital envelope and the certification service sign information, and submits the ciphertext user login token, the digital envelope and the certification service sign information to an application service to demand for the corresponding service; (4) the application service provides the corresponding service for the cloud user after being verified. Compared with the prior art, the application cloud safety certification method based on the third-party service ensures authenticity and non-repudiation of information sources, and improves safety of the process of information transmission.

Description

technical field [0001] The invention relates to the technical field of cloud computing, in particular to an application cloud security authentication method applicable to cloud service fields such as e-government, e-commerce, and industry and based on third-party services. Background technique [0002] As an emerging network application model, cloud computing has very good application and development prospects. As an emerging business model, cloud computing is still in its infancy, and there are still many problems to be solved. Its security issues Especially prominent, and identity authentication and access control management are one of the main issues of cloud computing security. Cloud services provided on the basis of cloud computing also have security issues that need to be solved urgently. Security issues have become the focus of cloud computing and cloud service promotion. A major obstacle mainly comes from the security issues caused by data sharing, the uncertainty of...

AI Technical Summary

Problems solved by technology

[0002] As an emerging network application model, cloud computing has very good application and development prospects. As an emerging business model, cloud computing is still in its infancy, and there are still many problems to be solved. Its security issues Especially prominent, and identity authentication and access control management are one of the main issues of cloud computing security. Cloud services provided on the basis of cloud computing also have security issues that need to be solved urgently. Security issues have become the focus of cloud computing and cloud service promotion. A major obstacle, mainly from the security issues caused by data sharing, the identity uncertainty of visitors and the potential danger caused by super privileges of cloud service providers

Images