Cloud computing identity authentication method

Abstract

The invention provides a cloud computing identity authentication method. The cloud computing identity authentication method comprises the following steps that (1) a cloud terminal identifies inserted cryptographic equipment and sends a login request message to a cloud server after identification; (2) after the cloud server receives the message, the cloud server sends an authentication message to the cloud terminal; (3) the cloud terminal extracts a digital certificate in the cryptographic equipment according to the authentication message, and encrypts the digital certificate and sends the digital certificate to the cloud server; (4) the cloud server verifies the user identity according to the digital certificate, when the verification passes, a virtual machine corresponding to the cloud server is directly connected to the cloud terminal through an RDP (Remote Desktop Protocol). According to the cloud computing identity authentication method, the cryptographic equipment is integrated, so that strong identity authentication of a user of a virtual desktop can be realized, and the potential safety hazard due to the single verification of a user name and a password in the existing cloud computing is made up.

Description

technical field [0001] The invention relates to the technical field of cloud computing security, in particular to a cloud computing identity authentication method. Background technique [0002] At present, cloud computing technology is widely used. The existing cloud computing identity authentication technology mostly relies on Microsoft's AD (Active Directory) domain, combined with the single sign-on technology based on OPenID and other protocols to achieve identity authentication. Username + password" is used to implement identity authentication, but the authentication strength is not enough. This situation is common in mainstream cloud computing platforms such as VMware and Citrix. In addition, the existing cloud computing platforms use remote desktop protocols (RDP, SPICE, etc.) to transmit data, and the unilateral authentication of the cloud terminal by the cloud server is often used, which will lead to the security risk of "man-in-the-middle attack". Contents of the ...

AI Technical Summary

Problems solved by technology

[0003] The purpose of the present invention is to provide a cloud computing identity authentication method that can meet the security requirements of access security, channel security, application security, etc. for the problems existing in the prior art, which can effectively solve the existing AD domain-based technology and Security Issues in Remote Desktop Protocol Cloud Computing Authentication

Images