Security authentication method and system based on open interface communication

Abstract

The invention discloses a security authentication method and system based on open interface communication, and the method comprises the steps: building an authorization service and an MYSQL service, and initializing a related authorization table in the MYSQL service; caching the updated authorization data in the authorization table to the memory data of the authorization service; enabling the authorized service to specify an interface needing security authentication; enabling the authorized service to initiate a request to an interface passing the security authentication in the interface, and carrying related authentication parameters at the same time; obtaining a comparison sign according to the authentication parameters, the authorization table and the memory data, and comparing the comparison sign with sign in the authentication parameters; and after the comparison is passed, enabling the interface to perform authorization authentication through the authorization authentication module, and determining that the authorization process is completed if the authorization authentication succeeds.

Description

technical field [0001] The invention relates to the field of computer technology, in particular to a safety authentication method and system based on open interface communication. Background technique [0002] With the upgrading of Internet micro-services and distributed technology, communication between services is essential. We often use a scenario where the open service interface authorizes our designated authorized services to access, and the authorized services are accessed by us. If there is no security verification for the interface, the open service interface will be exposed to other non-target services on the public network or intranet, and may be accessed or even maliciously used by other services not specified by us, and may be cracked due to interface replay attacks , if there is high-frequency interface access authentication, it is likely to cause database penetration. At this time, it is necessary to design a data access authorization scheme for directional ser...

AI Technical Summary

Problems solved by technology

[0002] With the upgrading of Internet micro-services and distributed technology, communication between services is essential. We often use a scenario where the open service interface authorizes our designated authorized services to access, and the authorized services are accessed by us. If there is no security verification for the interface, the open service interface will be exposed to other non-target services on the public network or intranet, and may be accessed or even maliciously used by other services not specified by us, and may be cracked due to interface replay attacks , if there is high-frequency interface access authentication, it is likely to cause database penetration. At this time, it is necessary to design a data access authorization scheme for directional service authorization to ensure that our services can only be accessed by our designated authenticated services. , to achieve the ultimate goal of data security

Existing data access authorization schemes have a certain amount of demand for machine memory, and the cost of memory is relatively high. There may also be security issues caused by unpacking HTTP request data and causing secret keys to be leaked or cracked.

Images