Server verification user management method and system, terminal and storage medium

Abstract

The invention provides a server user verification management method and system, a terminal and a storage medium, and the method comprises the steps: loading a safety strategy set in a database to a memory, creating a main service process and an auxiliary service process, wherein the main service process and the auxiliary service process are mounted in the memory; if the auxiliary service process confirms that the state of the main service process is abnormal, terminating the main service process and switching the auxiliary service process into a new main service process; verifying the user login information sent by the client by using the current main service process, establishing a communication connection with the verified client, and monitoring the communication quality with the client;calling the security policy set by using the current main service process to verify the security verification information sent by the client, and providing a service item corresponding to the security verification for the client passing the verification. According to the invention, the user management security of the server is improved, the single-point fault of the bastion host is avoided, and the stability is improved.

Description

technical field [0001] The present invention relates to the technical field of user management, in particular to a server-end authentication user management method, system, terminal and storage medium. Background technique [0002] With the rapid development and application of technologies such as big data and cloud computing, the scale of data centers has doubled, and secure access to hosts has gradually become a normal concern. The outstanding contradictions in the current host security access are the coarse granularity of user rights, shared accounts, and difficult operations to track. In addition, new CVE vulnerabilities that cannot be repaired in time continue to emerge in open source software, which also brings greater risks to host security access. [0003] Aiming at the above problems, a bastion machine (springboard machine) is currently used to solve the above problems. The bastion host has powerful functions, generally covering functions such as account management...

AI Technical Summary

Problems solved by technology

The bastion host has powerful functions, generally covering functions such as account management, authorization control, and security audit, but it occupies more resources and costs more, and there are potential security threats and security vulnerabilities, and there are single points of failure and bypass of the bastion host (internal other lateral movement) and other issues

Images