Multi-user password service flow on-demand control method and system in cloud environment

A technology of cryptographic services and control methods, applied in transmission systems, digital transmission systems, user identity/authority verification, etc., can solve problems such as HTTP header forgery, and achieve the effect of solving HTTP header forgery

Active Publication Date: 2022-03-15
北京安盟信息技术股份有限公司
View PDF8 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0011] Therefore, the technical problem to be solved by the present invention is to provide a method and system for on-demand control of multi-user password service traffic in a cloud environment. Current limit control, and solve the problem of http header forgery

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Multi-user password service flow on-demand control method and system in cloud environment
  • Multi-user password service flow on-demand control method and system in cloud environment
  • Multi-user password service flow on-demand control method and system in cloud environment

Examples

Experimental program
Comparison scheme
Effect test

Embodiment 1

[0037] In this embodiment, the system for controlling password flow by using the multi-user password service flow on-demand control method in the cloud environment includes an authentication plug-in, an authentication server, a user management server, a flow control plug-in and a server, and the client and authentication The plug-in is connected in communication, the authentication plug-in is respectively connected to the authentication server, the user management server and the flow control plug-in, and the flow control plug-in is connected to the server in communication.

[0038] When the identity identifier in the application credential is a shared consumer identifier or / and a private consumer identifier, such as figure 1 and figure 2 As shown, the steps for using the system to perform on-demand control of cryptographic service traffic are as follows:

[0039] 1) The user submits an application certificate application to the server for an application;

[0040] 2) The ser...

Embodiment 2

[0049]The difference between the application certificate in this embodiment and the application certificate in Embodiment 1 is that: in the above-mentioned method for on-demand control of multi-user password service traffic in the cloud environment, in step 2), the application certificate generated by the server includes the shared consumer identifiers and private consumer identifiers such as image 3 shown.

[0050] However, in this embodiment, the process of using the system to control the flow of cryptographic services on demand is also different from the process of using the system in Embodiment 1 to control the flow of cryptographic services on demand, as shown in figure 2 and Figure 4 As shown, specifically: in step 5), after the authentication is verified, perform the following operations:

[0051] 5-1) The authentication plug-in sends a request to the user management server to query the application current limiting method when the application calls the specified se...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention discloses a multi-user password service flow on-demand control method and system in a cloud environment, and the method carries out the flow limiting based on an http protocol header, solves the problem of http header counterfeiting through the association of an authentication process and a flow limiting process, and improves the flow limiting efficiency through the design of the content of the http protocol header and the authentication process. Compared with the prior art, the password service on-demand flow control method and the password service on-demand flow control device have the advantages that the capability of password service on-demand flow control is remarkably improved.

Description

technical field [0001] The invention relates to the technical field of password services. Specifically, it is an on-demand control method and system for multi-user password service traffic in a cloud environment. Background technique [0002] Flow control refers to monitoring the flow of the current system. If it exceeds the preset value or the maximum capacity of the current system, some requests need to be rejected to protect the system. The default value comes from the server resource allocation strategy, and the maximum capacity value comes from the performance test results. [0003] Cloud cryptography services refer to the migration of traditional cryptography services (such as server cipher machines, signature verification servers, and key management) to the cloud environment for tenants to pay for. In the cloud environment, the custom stream protocol of the password service is converted to the http protocol. Current reverse proxy software can usually perform flow c...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & AuthorityApplications(China)
IPC IPC(8): H04L47/80H04L9/40H04L9/32G06F21/31
CPCH04L47/808H04L63/0876H04L63/083H04L9/3226G06F21/31
Inventor李宁张大伟
Owner北京安盟信息技术股份有限公司