A network security authentication method

Abstract

The invention provides a network security authentication method. The network security authentication method comprises the following steps: S1, configuring a KDC server based on Kerberos authentication service from a web client by an administrator; S2, correlating resources with a user Id, a role, a Token Id and a Token state to construct correlation information by the KDC server; S3, acquiring a token value and token information from the web client by a user, saving the token information in a persistent node, and binding a token to the resources; S4, according to the token information and the correlation information in the step S2, determining the right for the user to access the resources. The user can configure the KDC server through a web browser, so that one-key data deployment security service is achieved, and effective monitoring on the running state of the KDC server is achieved, deep integration with large data and cloud computation is achieved, and thus a protecting mechanism with a higher security level is provided for the resources of the user.

Description

technical field [0001] The invention relates to the technical field of computer software security authentication, in particular to a network security authentication method. Background technique [0002] Apache Kerby is a set of open source security authentication framework developed by java. It appears as a sub-project of Apache Directory. Through kerby developers can develop their own Kerberos authentication server KDC Server, and it also supports a variety of security protocols, such as X509, oauth2 With good support, it can build an excellent security shield for Hadoop big data and cloud computing environments. [0003] Based on the Apache Kerby security authentication framework, it can independently complete the KDC server environment setup through web configuration, provide Kerberos authentication services, and do not require third-party services, and provide auto-failover functions without a single point of failure. Support a variety of security authentication protoco...

AI Technical Summary

Problems solved by technology

[0005] Because the installation and configuration of Kerberos is extremely complicated, and there are many parameters to be configured, it is difficult for ordinary users to fully grasp it. The configuration environment is also in the Linux environment shell, and the operation is not very convenient and clear, and there is no monitoring plan

Therefore, there is also the problem of a unified management user interface, which makes users unable to truly grasp the internal running status of the KDC server. All operations need to be performed by the user through the command line, and the user experience is poor.

[0006] In addition, the existing technology is not highly integrated with Hadoop or cloud computing, and users need to do additional configuration work. There are certain difficulties and risks in configuration and operation and maintenance.

At the same time, because there is no monitoring method, the stability of the KDC server has become an important bottleneck, and there are hidden dangers in security

Images