Method for carrying out cloud protection certification, server and client

Abstract

Embodiments of the invention disclose a method for carrying out cloud protection certification, a server and a client. According to the method, after received request information is judged to not carry a Token, a response content which is encapsulated by a cloud random number, certification time and a key package is generated and is sent to the client; the client obtains a newborn Token accordingto the response content, a client identifier and a client random number generated by the client, generates second request information carrying the newborn Token and sends the second request information to the server; and the server realizes certification about whether to allow the client to visit a source station through the Token. According to the method, through interaction with the client, theclient which sends the first request information without the Token regenerates the second request information carrying the Token, so that the legality of the Token carried by the second request information about the request information and the authenticity about the client are checked, and the authentication of the Token is carried out on the request information without the Token.

Description

technical field [0001] Embodiments of the present invention relate to the technical field of network security, in particular to a method for performing cloud protection authentication on a client, a server and a client. Background technique [0002] Token, which is used as a token or cipher in computer authentication, represents the object of the right to perform certain operations. For example, before some data is transmitted, it is necessary to check the password through Token, and different passwords are authorized for different data operations. [0003] In the traditional Token-based authentication method, the client uses a user name and password to request login, and the server receives the request to verify the user name and password. After the verification is successful, the server will issue a Token, and then send the Token to the client. , after the client receives the Token, it can store it, such as putting it in a cookie or in LocalStorage (local storage). Every ...

AI Technical Summary

Problems solved by technology

[0005] The technical problem to be solved by the present invention is how to solve the problem that in the existing Token-based identity verification method, it is impossible to carry out Token-based identity verification for request information that does not carry Token

Images