Authentication system and method

Abstract

An authentication system and method, and a server (1000). The authentication system comprises a service access layer (21), an authentication logical layer (22), and a data storage layer (23). The service access layer (21) comprises multiple service access servers (21a), the authentication logical layer (22) comprises multiple authentication logical servers (22a), and the data storage layer (23) comprises a primary database (23a) and multiple secondary databases (23b). Servers and databases on all layers are deployed in a cross-region manner. A target service access server (21a1) is used for receiving an authentication request (501, 801) sent by a service provider, and sending the authentication request to a target authentication logical server (22a1). The target authentication logical server (22a1) is used for obtaining an authorization policy (503) related to the authentication request from a target secondary database (23b1), performs analysis processing on the authentication request according to the obtained authorization policy, so as to obtain an authentication result (504), and sends the authentication result (505) to the target service access server (21a1). The target service access server (21a1) is further used for sending the authentication result (506, 508) to the service provider. The method improves the usability of the authentication system, and reduces the access delay, thereby improving the overall authentication service quality.

Description

technical field [0001] The embodiments of the present invention relate to the technical field of information security, and in particular to an authentication system and method. Background technique [0002] Authentication refers to verifying whether a user has certain permissions. An authentication system refers to a system for providing authentication services to authenticate user operations. [0003] Please refer to figure 1 , which shows a schematic diagram of an authentication system provided by the prior art. The authentication system includes: a service access layer 11 , an authentication logic layer 12 and a data storage layer 13 . The service access layer 11 is used to provide an authentication interface to the service provider, and the service provider sends an authentication request to the service access layer 11 by calling the authentication interface. The service access layer 11 may include multiple service access servers 11a. The service access layer 11 is ...

AI Technical Summary

Problems solved by technology

[0006] In order to solve the problem that the availability of the authentication system cannot be guaranteed in the prior art, the embodiment of the present invention provides an authentication system and method

Images