Single sign-on method and device based on virtual private network

Abstract

The present invention provides a single sign-on method and device based on a virtual private network, wherein the method includes: when a VPN server detects that a VPN login account is input, sending the VPN login account to an authentication server; Log in to the account for authentication, and return the authentication result to the VPN server; wherein, the authentication result when the authentication is successful includes a token used as a single sign-on authentication credential; when the authentication result received by the VPN server indicates that the authentication When successful, if a resource request for obtaining a single sign-on resource is received, the token is sent to the single sign-on authentication center of the resource server; wherein, the resource server includes a single sign-on authentication center and a resource system; The single sign-on authentication center verifies the token, and performs corresponding operations according to the verification result. Therefore, the embodiment of the present invention has the advantages of simple configuration, high account security and fast login.

Description

technical field [0001] The present invention relates to the technical field of network security, in particular to a single sign-on method and device based on a virtual private network (VPN, Virtual Private Network). Background technique [0002] VPN is a technology for establishing a private network on a public network for encrypted communication, and it is widely used in enterprise networks. The VPN gateway realizes remote access by encrypting the data packet and converting the destination address of the data packet. Therefore, when using a VPN, the user must log in with an account and password, and only after being successfully authenticated can he have access to resources in the VPN. [0003] However, when the number of VPN users is large or specific user requirements need to be met, different authentication methods need to be applied. Therefore, in order to facilitate the use of users and improve the usability of VPN products, VPN gateways generally support a variety o...

AI Technical Summary

Problems solved by technology

[0005] Although the use of single sign-on can avoid repeated logins when users request single-sign-on resources in VPN, users need to go through two authentication operations to access resources, which affects the efficiency of resource acquisition; and because the login used by users when using VPN The account and the login account used when requesting single sign-on resources after successfully logging in to the VPN are independent of each other. When developing VPN products, not only the one-time authentication account information for logging in to the VPN gateway needs to be pre-configured, but also the Secondary authentication account information for single sign-on, resulting in more account information to be configured

Images