Authentication method, server and access control device

Abstract

An embodiment of the invention provides an authentication method, a server and an access control device. The method comprises the following steps: receiving a resource access request and a first signature which are transmitted by the access control device by using the server, wherein the first signature is generated by encrypting the resource access request through the access control device by using a stored temporary key; acquiring the stored temporary key distributed for the access control device by using the server, and encrypting the resource access request by using the temporary key to generate first verification data; if the first signature is consistent to the first verification data, carrying out authentication on the resource access request by using the server; and if an authentication result of the resource access request is authentication passing, processing the resource access request by using the server. By the method, the signature is generated by the temporary key to carry out authentication, the risk of leaking of an intrinsic private key can be avoided, and the safety of the intrinsic private key is guaranteed.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to an authentication method, a server, and an access control device. Background technique [0002] With the increasing popularity and massive application of cloud computing technology, the advantages of cloud computing in terms of high availability of services and scalability of processing capabilities are increasingly recognized by the industry. Among them, in the cloud service authentication system, users can access cloud resources through the cloud service management platform, but not every user is qualified to access cloud resources, so it is necessary to authenticate the access user to determine whether the user has access permission. [0003] In the existing technical solutions, the cloud service management platform needs to generate a signature for the access request, and send the signature and the access request to the server so that the server can verify the s...

AI Technical Summary

Problems solved by technology

[0003] In the existing technical solutions, the cloud service management platform needs to generate a signature for the access request, and send the signature and the access request to the server so that the server can verify the signature. However, the signature in the cloud service management platform is generated by encrypting the access request based on the user's inherent private key. Since the user's inherent private key is saved by the server, when the cloud service management platform needs to generate a signature, it will Obtain the user's inherent private key directly from the server, so that in the process of transmitting the inherent private key, it is easy to cause the risk of the inherent private key being leaked, reducing the security of the user's inherent private key transmission

Images