An authentication method, server, and access control device

Abstract

An embodiment of the present invention provides an authentication method, a server, and an access control device. The method includes the following steps: the server receives a resource access request and a first signature sent by the access control device, and the first signature is a temporary password stored by the access control device. generated by encrypting the resource access request with the key; the server obtains the stored temporary key assigned to the access control device, and uses the temporary key to encrypt the resource access request to generate the first verification data; if the first signature and the first verification data If the matching is consistent, the server authenticates the resource access request; if the authentication result of the resource access request is that the authentication is passed, the server processes the resource access request. With this application, by using the temporary key to generate a signature for authentication, the risk of the inherent private key being leaked can be avoided, and the security of the inherent private key is guaranteed.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to an authentication method, a server, and an access control device. Background technique [0002] With the increasing popularity and massive application of cloud computing technology, the advantages of cloud computing in terms of high availability of services and scalability of processing capabilities are increasingly recognized by the industry. Among them, in the cloud service authentication system, users can access cloud resources through the cloud service management platform, but not every user is qualified to access cloud resources, so it is necessary to authenticate the access user to determine whether the user has access permission. [0003] In the existing technical solutions, the cloud service management platform needs to generate a signature for the access request, and send the signature and the access request to the server so that the server can verify the s...

AI Technical Summary

Problems solved by technology

[0003] In the existing technical solutions, the cloud service management platform needs to generate a signature for the access request, and send the signature and the access request to the server so that the server can verify the signature. However, the signature in the cloud service management platform is generated by encrypting the access request based on the user's inherent private key. Since the user's inherent private key is saved by the server, when the cloud service management platform needs to generate a signature, it will Obtain the user's inherent private key directly from the server, so that in the process of transmitting the inherent private key, it is easy to cause the risk of the inherent private key being leaked, reducing the security of the user's inherent private key transmission

Images