A method of identity authentication in a virtualized environment

Abstract

The invention designs a method for authenticating an identity under a virtualized environment.The method specifically comprises the following steps that firstly, a server virtualized environment is set to be only allowed to be remotely connected to a virtual machine through a local IP; then, the basic information of a user of the remote virtual machine is registered and logged in, and a USB Key hardware device corresponding to the user is uniquely allocated to the user; the remote user having the corresponding USB Key sends a user name, a code and other information to a main server to request main server authentication, and after passing the identity authentication of the main server, the main server will return a random number to the remote user and inform an auxiliary server of the random number, and the remote user has to send the random number and the identity information of the remote user to the auxiliary server within valid time to initiate secondary authentication to the auxiliary server.When all authentication passes, the auxiliary server starts the corresponding virtual machine and communicates with the remote user through transmission agency, and in this way, the remote user can successfully log in a remote desktop under the virtualized environment.

Description

technical field [0001] The invention belongs to the technical field of cloud computing, and more particularly, relates to an identity authentication method in a virtualized environment. Background technique [0002] Cloud computing represents a new business computing model, and there are still many uncertainties in its practical application and many security challenges. Among them, the problem of user data security in the cloud platform is particularly prominent, mainly in the following aspects: the efficiency of virtualization in the cloud requires that virtual machines of multiple organizations coexist on the same physical resource. While traditional data center security still applies to cloud environments, physical isolation and hardware-based security cannot protect against attacks between virtual machines on the same server. Management access is through the Internet, rather than the controlled and restricted direct or on-site connection that persists in the traditional...

AI Technical Summary

Problems solved by technology

This increases risk and exposure and will require close monitoring of changes to system controls and access control restrictions

[0003] At present, the existing cloud platforms basically provide a method for remote users to remotely connect to the virtual machine, but this method is directly connected without any restrictions on the connecting user, which allows any user to remotely connect to the virtual machine. machine for remote desktop mapping, which makes the virtualized environment extremely insecure

Images