Unified identity authentication system based on cloud platform

Abstract

The invention discloses a unified identity authentication system based on a cloud platform, comprising a management subsystem (101) which carries out centralized management to a user, a virtual computing resource, a virtual software resource and a virtual identity object and is responsible for correlation relationship management of the user and the virtual object; a mapping subsystem (102) which maps the virtual object and an entity object managed by the management subsystem (101); an access control subsystem (103) which defines the authority of the mapped entity object; a data storage subsystem (104) which stores the data, the entity AD (active directory) domain data and the entity NIS (network information service) domain data used by the management subsystem (101), wherein the user has an AD domain account and an NIS domain account, the entity object comprises an entity AD group and an entity NIS group, the AD is an active directory, NIS is network information service. Management and control problems of resource access authority after unified authentication are effectively solved by using the unified identity authentication system.

Description

technical field [0001] The invention relates to the technical field of authentication, in particular to a unified identity authentication system based on a cloud platform for authenticating users. Background technique [0002] Traditional unified identity authentication can be implemented in multiple application systems. Users only need to log in once to access all mutually trusted application systems. Once logged in, resources can be fully enjoyed. Most unified identity authentication products are based on the unified authentication of traditional applications, so the unified authentication and authorization capabilities for cloud platforms and cloud resources are relatively weak. In addition, the authorization granularity of most unified identity authentication products is only accurate to applications, devices, and hosts. In layman's terms, it means whether the user has the right to connect to a certain IP address + port, and the access rights to internal resources of the...

AI Technical Summary

Problems solved by technology

These products can easily realize unified login authentication of multiple systems, but for different resources in each subsystem of unified login authentication, there is still a lack of means for further security control of specific business system resources, especially for different users in cloud resources. Lack of effective management and control of access to expensive computing resources and data resources

[0009] For this reason, after long-term theoretical research and practical accumulation, the inventor of this case developed a unified identity authentication scheme based on the cloud platform, which well solved the problem of resource access rights management and control of different coordination after unified authentication

Images