Resource operation safety authentication method and system under cloud calculation environment

Abstract

The invention relates to a resource operation safety authentication method and system under a cloud calculation environment. The system comprises a web client side, an authentication server and a cloud resource background server. In the safety authentication process, a user carries out all operation through the web client side, an operation request is sent to the cloud resource background server, and the cloud resource background server verifies and passes the operation request and sends the request information to the authentication server to be authenticated; the authentication server divides the resource operation types into different levels, and different authentication modes are selected according to the levels; the web client side acquires the authentication modes and notifies the user to carry out authentication; after the user inputs authentication information, the web client side sends the authentication information to the authentication server, and corresponding operation is carried out only when the authentication information is authenticated to be valid; meanwhile, the authentication complexity level can be gradually increased according to the increasing of the resource operation sensibility; thus, safe and effective protection is provided for resource operation under the whole cloud calculation environment.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a resource operation security authentication method and system in a cloud computing environment. Background technique [0002] Cloud computing is an Internet-based computing method in which shared hardware and software resources and information are provided to computers and other devices on demand. Typical cloud computing providers often provide general-purpose network business applications, which can be accessed through software such as browsers or other Web services, while software and data are stored on servers. Cloud computing services usually provide general-purpose online business applications accessed through a browser, and software and data can be stored in data centers. [0003] At present, there is no complete product on the market for security authentication of cloud resource operations in a cloud computing environment. In the existing technology, most co...

AI Technical Summary

Problems solved by technology

For example: if a user logs in and does not perform any operations, the valid time of the account is 30 minutes, then during this period, if the user leaves and other people use this user to operate, the loss will be destructive

Images