A cloud-based authentication system and method

Abstract

The present invention discloses an authentication system and method based on a cloud platform, which relates to the technical field of authentication systems, and comprises the following steps: obtaining authentication request information of a request module and matching it with a response module to obtain a first response submodule, corresponding authentication matching information and authentication confusion message; the authentication module interprets the authentication matching information and the authentication confusion message according to an interpretation protocol to obtain a first request authentication factor and a first confusion authentication factor; the request module interprets the first authentication protocol and the first confusion protocol to obtain a second request authentication factor and a second confusion authentication factor; the second behavior authentication factor is verified, and the first behavior authentication factor stored in the back end of the authentication platform is retrieved; the first request authentication factor is compared with the second request authentication factor to obtain a request authentication result, and whether the authentication is successful is jointly judged according to the request authentication result, the behavior authentication result and the request confusion result, so that the authentication process is more secure and the detection of illegal human-machine login is more sensitive.

Description

Technical Field

[0001] The present invention relates to the technical field of authentication systems, and in particular to an authentication system and method based on a cloud platform. Background Art

[0002] Authentication vulnerabilities generally refer to loopholes in the system's user authentication process, which may allow attackers to bypass or deceive the system's user identity check and obtain the identity permissions of other users. This vulnerability may cause the attacker to completely obtain the target user's permissions. If it is a user system, it will cause loss of the target user's resources. If it is a management system, the harm is even greater and may cause unpredictable losses to the system as a whole. At the same time, this vulnerability will also have a negative impact on the reputation of organizations and enterprises, and may even lead to economic losses and legal liabilities.

[0003] At present, the Chinese invention patent with application number CN112616148B discloses an authentication method, an authentication platform and an authentication system. The authentication platform responds to the authentication request for the terminal sent by the service platform, obtains the dynamic authentication factor pre-sent by the terminal to the SM-SR through the corresponding eUICC; the authentication request contains the dynamic authentication factor ciphertext pre-sent by the terminal to the service platform and the EID of the eUICC; the authentication platform decrypts the dynamic authentication factor ciphertext based on the pre-agreed key algorithm to obtain the dynamic authentication factor. When the dynamic authentication factor pre-sent by the terminal to the SM-SR through the corresponding eUICO obtained by the authentication platform is consistent with the dynamic authentication factor obtained by decrypting the dynamic authentication factor ciphertext, the authentication platform sends a verification request to the eUICC based on the EID, and the verification request contains the dynamic authentication factor; the authentication platform receives the verification information returned by the eUICC based on the verification request, and returns the authentication result to the service platform based on the verification information, which reduces the security risk of the service platform accessing the terminal and protects the interests of users and service platforms. However, it does not take into account the abnormal mouse behavior detection of user login and whether the information transmission between the authentication platforms is safe. The verification message returned by the authentication platform is likely to be intercepted, and zero trust in the authentication platform cannot be achieved. Summary of the invention

[0004] The technical problem solved by the present invention is: without considering the abnormal mouse behavior detection of user login and whether the information transmission between authentication platforms is safe, the verification message returned by the authentication platform is likely to be intercepted, and zero trust in the authentication platform cannot be achieved.

[0005] In order to solve the above technical problems, the present invention provides the following technical solutions: a cloud platform-based authentication system and method, comprising the following steps:

[0006] Step S100, obtaining authentication request information of the request module, and matching the authentication request information with the response module to obtain a first response submodule, corresponding authentication matching information and authentication obfuscation message;

[0007] Step S200: the authentication module interprets the authentication matching information and the authentication obfuscation message according to the interpretation protocol to obtain a first authentication protocol and a first obfuscation protocol; the authentication platform backend interprets the first authentication protocol and the first obfuscation protocol to obtain a first request authentication factor and a first obfuscation authentication factor;

[0008] Step S300, sending the first authentication protocol and the first obfuscation protocol to the request module, the request module interprets the first authentication protocol and the first obfuscation protocol to obtain a second request authentication factor and a second obfuscation authentication factor, and sending the second request authentication factor and the second obfuscation authentication factor to the authentication platform front end;

[0009] Step S400, checking the real-time behavior factor of the authentication platform front end to obtain the second behavior authentication factor, and retrieving the comparison behavior factor stored in the authentication platform back end to obtain the first behavior authentication factor;

[0010] Step S500, compare the first request authentication factor with the second request authentication factor to obtain a request authentication result, compare the first behavior authentication factor with the second behavior authentication factor to obtain a behavior authentication result, compare the first obfuscation authentication factor with the second obfuscation authentication factor to obtain a request obfuscation result, and jointly determine whether the authentication is successful based on the request authentication result, the behavior authentication result and the request obfuscation result.

[0011] As a preferred solution of the cloud platform-based authentication method described in the present invention, step S100 specifically includes:

[0012] Step S101, when the request module detects the user's request to log in, the request module generates corresponding authentication request information;

[0013] Step S102, the response module matches the first response submodule based on the authentication request information;

[0014] Step S103: the first response submodule sends the corresponding authentication matching information and the authentication obfuscation message generated by the second response submodule to the authentication module.

[0015] As a preferred solution of the cloud platform-based authentication method described in the present invention, step S200 specifically includes:

[0016] Step S201, the authentication module interprets the authentication matching information and the authentication obfuscation message according to the interpretation protocol to obtain a first authentication protocol and a first obfuscation protocol;

[0017] Step S202: The authentication platform backend interprets the first authentication protocol and the first obfuscation protocol to obtain a first request authentication factor and a first obfuscation authentication factor.

[0018] As a preferred solution of the cloud platform-based authentication method described in the present invention, step S300 specifically includes:

[0019] Step S301, the authentication module sends the first authentication protocol and the first obfuscation protocol to the request module;

[0020] Step S302, the request module interprets and responds to the first authentication protocol and the first obfuscation protocol to obtain a second request authentication factor and a second obfuscation authentication factor;

[0021] Step S303: Send the second requested authentication factor and the second obfuscated authentication factor to the authentication platform front end.

[0022] As a preferred solution of the cloud platform-based authentication method described in the present invention, step S400 specifically includes:

[0023] Step S401, retrieve the control behavior factors stored in the backend of the authentication platform, the control behavior factors include the click position, click time and movement trajectory of the mouse, extract the behavior characteristic factors according to the control behavior factors, the behavior characteristic factors include average movement speed, acceleration mode, click mode, trajectory complexity and dwell frequency;

[0024] Step S402, using the behavior feature factor to train an identity authentication model based on machine learning, outputting the first behavior authentication factor, and storing the first behavior authentication factor in the authentication platform backend;

[0025] Step S403: input the real-time behavior factor of the authentication platform front end into the identity authentication model to obtain a second behavior authentication factor.

[0026] As a preferred solution of the cloud platform-based authentication method described in the present invention, step S500 specifically includes:

[0027] Step S501, comparing the first request authentication factor with the second request authentication factor;

[0028] If the first request authentication factor is consistent with the second request authentication factor, the request authentication result is authentication passed;

[0029] If the first request authentication factor is inconsistent with the second request authentication factor, the request authentication result is authentication failure;

[0030] Step S502, comparing the first behavior authentication factor with the second behavior authentication factor;

[0031] If the first behavior authentication factor is consistent with the second behavior authentication factor, the behavior authentication result is authentication passed;

[0032] If the first behavior authentication factor is inconsistent with the second behavior authentication factor, the behavior authentication result is authentication failure;

[0033] Step S503, comparing the first obfuscated authentication factor with the second obfuscated authentication factor;

[0034] If the first obfuscated authentication factor is consistent with the second obfuscated authentication factor, the obfuscated authentication result is authentication passed;

[0035] If the first obfuscated authentication factor is consistent with the second obfuscated authentication factor, the obfuscated authentication result is that the authentication fails.

[0036] As a preferred solution of the cloud platform-based authentication method described in the present invention, wherein:

[0037] Judging whether the authentication is successful based on the request authentication result, the behavior authentication result and the request obfuscation result specifically includes:

[0038] When the request authentication result, the behavior authentication result and the obfuscation authentication result are all authenticated, the first response submodule opens corresponding access rights to the logged-in user;

[0039] When any of the request authentication result, the behavior authentication result and the obfuscation authentication result fails authentication, the first response submodule closes the corresponding access rights for the logged-in user.

[0040] As a preferred solution of the cloud platform-based authentication method described in the present invention, wherein:

[0041] The response module includes a first response submodule and a second response submodule.

[0042] As a preferred solution of the cloud platform-based authentication method described in the present invention, wherein:

[0043] The authentication module includes an authentication platform front end and an authentication platform back end, and the authentication platform front end and the authentication platform back end use a pre-agreed key algorithm to decrypt the transmitted information.

[0044] An authentication system based on a cloud platform, comprising a request module, an authentication module and a response module;

[0045] The request module is used to issue authentication request information;

[0046] The authentication module is used to check whether the authentication request information of the request module meets the authentication requirements according to the response verification information;

[0047] The response module is used to send response verification information in response to the authentication request information.

[0048] The beneficial effects of the present invention are as follows: by collecting the authentication request message of the request module, the response module receives the authentication request message and gives a response verification message, the authentication module is used to interpret the response verification message based on the interpretation protocol between the authentication module and the response module, and obtains the first request authentication factor, and at the same time requires the request module to interpret the response verification message to obtain the second request authentication factor, and judges whether the first request authentication factor is consistent with the second request authentication factor, and can preliminarily judge whether the user's login request is a login request allowed by the response module, and obtains the real-time behavior factor of the authentication platform front end of the authentication module and the control behavior factor stored in the authentication platform back end in real time, and inputs the control behavior factor and the real-time behavior factor into the identity authentication model to obtain the first behavior authentication factor and the second behavior authentication factor, and judges whether the first behavior authentication factor and the second behavior authentication factor are consistent, which can not only judge whether the user Whether the user's login request belongs to an illegal human-machine login, and whether the current login page is replayed or forcibly cracked, the second response submodule of the response module sends the obfuscated authentication message of the non-first response submodule to the request module, the authentication request module interprets the obfuscated authentication message to obtain the second obfuscated authentication factor, the authentication platform backend interprets the first obfuscation protocol to obtain the first obfuscated authentication factor, and at the same time, the authentication platform backend and the authentication platform frontend use a pre-agreed key algorithm to decrypt the transmitted information, and determine whether the first obfuscated authentication factor is consistent with the second obfuscated authentication factor, which can further determine whether the user's login request is a login request allowed by the response module, and at the same time prevent the occurrence of man-in-the-middle behavior in the authentication module, thereby making the security of the authentication process and the detection of illegal human-machine login more sensitive, and can prevent important information from being stolen and illegally used. BRIEF DESCRIPTION OF THE DRAWINGS

[0049] Figure 1 A basic flow chart of a cloud platform-based authentication method provided for one embodiment of the present invention. DETAILED DESCRIPTION

[0050] In order to make the above-mentioned objects, features and advantages of the present invention more obvious and easy to understand, the specific implementation methods of the present invention are described in detail below in conjunction with the drawings. It is obvious that the described embodiments are only part of the embodiments of the present invention, but not all of the embodiments.

[0051] Example, see Figure 1 , as an embodiment of the present invention, provides an authentication method based on a cloud platform, comprising the following steps:

[0052] Step S100, obtaining authentication request information of the request module, and matching the authentication request information with the response module to obtain a first response submodule, corresponding authentication matching information and authentication obfuscation message;

[0053] Step S200: the authentication module interprets the authentication matching information and the authentication obfuscation message according to the interpretation protocol to obtain a first authentication protocol and a first obfuscation protocol; the authentication platform backend interprets the first authentication protocol and the first obfuscation protocol to obtain a first request authentication factor and a first obfuscation authentication factor;

[0054] Step S300, sending the first authentication protocol and the first obfuscation protocol to the request module, the request module interprets the first authentication protocol and the first obfuscation protocol to obtain a second request authentication factor and a second obfuscation authentication factor, and sending the second request authentication factor and the second obfuscation authentication factor to the authentication platform front end;

[0055] Step S400, checking the real-time behavior factor of the authentication platform front end to obtain the second behavior authentication factor, and retrieving the comparison behavior factor stored in the authentication platform back end to obtain the first behavior authentication factor;

[0056] Step S500, compare the first request authentication factor with the second request authentication factor to obtain a request authentication result, compare the first behavior authentication factor with the second behavior authentication factor to obtain a behavior authentication result, compare the first obfuscation authentication factor with the second obfuscation authentication factor to obtain a request obfuscation result, and jointly determine whether the authentication is successful based on the request authentication result, the behavior authentication result and the request obfuscation result.

[0057] Step S100 specifically includes:

[0058] Step S101, when the request module detects the user's request to log in, the request module generates corresponding authentication request information;

[0059] Step S102, the response module matches the first response submodule based on the authentication request information;

[0060] Step S103: the first response submodule sends the corresponding authentication matching information and the authentication obfuscation message generated by the second response submodule to the authentication module.

[0061] In this embodiment, when a user requests to log in, the request module sends a request authentication to the authentication module, and the authentication module sends the corresponding request authentication to the response module. The response module obtains different first response sub-modules and second response sub-modules according to the different request authentications. After receiving the authentication request, the first response sub-module returns the corresponding authentication matching information, and the second response sub-module randomly generates different authentication confusion messages, which can improve the authentication accuracy and security of the authentication system.

[0062] Step S200 specifically includes:

[0063] Step S201, the authentication module interprets the authentication matching information and the authentication obfuscation message according to the interpretation protocol to obtain a first authentication protocol and a first obfuscation protocol;

[0064] Step S202: The authentication platform backend interprets the first authentication protocol and the first obfuscation protocol to obtain a first request authentication factor and a first obfuscation authentication factor.

[0065] In this embodiment, the authentication module and the response module follow a pre-set interpretation protocol to interpret the authentication matching information and authentication confusion messages transmitted by the authentication module and the response module, and are only open to the authentication platform backend of the authentication module and the response module, which can improve the defense level against man-in-the-middle attacks and replay attacks.

[0066] Step S300 specifically includes:

[0067] Step S301, the authentication module sends the first authentication protocol and the first obfuscation protocol to the request module;

[0068] Step S302, the request module interprets and responds to the first authentication protocol and the first obfuscation protocol to obtain a second request authentication factor and a second obfuscation authentication factor;

[0069] Step S303: Send the second requested authentication factor and the second obfuscated authentication factor to the authentication platform front end.

[0070] In this embodiment, the authentication module sends the first authentication protocol and the first obfuscation protocol to the request module. The request module interprets the first authentication protocol and the first obfuscation protocol and returns the second request authentication factor and the second obfuscation authentication factor to the authentication platform front end. The first obfuscation protocol is generated by the second response submodule. Even if the address information and other authentication information of the first response submodule are illegally eavesdropped by the request module, the obfuscated message request module sent by the second response submodule cannot be authenticated, and the returned second obfuscation authentication factor is inconsistent with the first obfuscation authentication factor and cannot pass the authentication of the authentication system, thereby greatly improving the authentication strength of the authentication system and ensuring the security of information.

[0071] Step S400 specifically includes:

[0072] Step S401, retrieve the control behavior factors stored in the backend of the authentication platform, the control behavior factors include the click position, click time and movement trajectory of the mouse, extract the behavior characteristic factors according to the control behavior factors, the behavior characteristic factors include average movement speed, acceleration mode, click mode, trajectory complexity and dwell frequency;

[0073] Step S402, using the behavior feature factor to train an identity authentication model based on machine learning, outputting the first behavior authentication factor, and storing the first behavior authentication factor in the authentication platform backend;

[0074] Step S403: input the real-time behavior factor of the authentication platform front end into the identity authentication model to obtain a second behavior authentication factor.

[0075] In this embodiment, the click position, click time and movement trajectory of the mouse when an illegal human-machine attempts to log in to the authentication system and the click position, click time and movement trajectory of the mouse when a user attempts to log in to the authentication system will show obvious differences and are difficult to imitate. By real-time monitoring the click position, click time and movement trajectory of the mouse passed to the front end of the authentication platform when the request module attempts to input and the click position, click time and movement trajectory of the mouse stored in the back end of the authentication platform, an identity authentication model based on machine learning is established to verify whether the login is an illegal human-machine login or a normal user login, and the abnormal behavior of the front end of the authentication platform can be monitored, which can prevent illegal human-machine login to a large extent.

[0076] Step S500 specifically includes:

[0077] Step S501, comparing the first request authentication factor with the second request authentication factor;

[0078] If the first request authentication factor is consistent with the second request authentication factor, the request authentication result is authentication passed;

[0079] If the first request authentication factor is inconsistent with the second request authentication factor, the request authentication result is authentication failure;

[0080] Step S502, comparing the first behavior authentication factor with the second behavior authentication factor;

[0081] If the first behavior authentication factor is consistent with the second behavior authentication factor, the behavior authentication result is authentication passed;

[0082] If the first behavior authentication factor is inconsistent with the second behavior authentication factor, the behavior authentication result is authentication failure;

[0083] Step S503, comparing the first obfuscated authentication factor with the second obfuscated authentication factor;

[0084] If the first obfuscated authentication factor is consistent with the second obfuscated authentication factor, the obfuscated authentication result is authentication passed;

[0085] If the first obfuscated authentication factor is consistent with the second obfuscated authentication factor, the obfuscated authentication result is that the authentication fails.

[0086] In this embodiment, the second obfuscated authentication factor, the second behavior authentication factor and the second request authentication factor of the request module are compared one by one for consistency with the first obfuscated authentication factor, the first behavior authentication factor and the first request authentication factor, so that triple authentication can be performed on the authentication module, thereby enhancing the authentication strength of the authentication system.

[0087] Judging whether the authentication is successful based on the request authentication result, the behavior authentication result and the request obfuscation result specifically includes:

[0088] When the request authentication result, the behavior authentication result and the obfuscation authentication result are all authenticated, the first response submodule opens corresponding access rights to the logged-in user;

[0089] When any of the request authentication result, the behavior authentication result and the obfuscation authentication result fails authentication, the first response submodule closes the corresponding access rights for the logged-in user.

[0090] In this embodiment, when one of the authentication result, behavior authentication result and request obfuscation result fails, the corresponding access rights are closed to the logged-in user. At this time, the logged-in user does not have the authority to access the information of the response module, which can greatly improve the integrity of the identity authentication information verification of the logged-in user and reduce the possibility of illegal human-machine login.

[0091] The response module includes a first response submodule and a second response submodule.

[0092] In this embodiment, the first response submodule is used to send authentication matching information to the request module for preliminarily determining whether the user's login request is a login request allowed by the response module, and the second response submodule is used to send obfuscated authentication information for further determining whether the user's login request is a login request allowed by the response module.

[0093] The authentication module includes an authentication platform front end and an authentication platform back end, and the authentication platform front end and the authentication platform back end use a pre-agreed key algorithm to decrypt the transmitted information.

[0094] An authentication system based on a cloud platform, comprising a request module, an authentication module and a response module;

[0095] The request module is used to issue authentication request information;

[0096] The authentication module is used to check whether the authentication request information of the request module meets the authentication requirements according to the response verification information;

[0097] The response module is used to send response verification information in response to the authentication request information.

[0098] In this embodiment, the response module interprets the authentication information transmitted between the authentication modules using a pre-agreed interpretation protocol, and the interpretation protocol is not open to the authentication platform front end, which can prevent the authentication information of the authentication platform front end and the authentication platform back end from being eavesdropped and illegally used by the request module.

[0099] By collecting the authentication request message of the request module, the response module receives the authentication request message and gives a response verification message. The authentication module interprets the response verification message based on the interpretation protocol between the authentication module and the response module to obtain the first request authentication factor. At the same time, the request module is required to interpret the response verification message to obtain the second request authentication factor. It is judged whether the first request authentication factor is consistent with the second request authentication factor. It can preliminarily judge whether the user's login request is a login request allowed by the response module, obtain the real-time behavior factor of the authentication platform front end of the authentication module and the comparison behavior factor stored in the authentication platform back end in real time, input the comparison behavior factor and the real-time behavior factor into the identity authentication model, obtain the first behavior authentication factor and the second behavior authentication factor, and judge whether the first behavior authentication factor is consistent with the second behavior authentication factor. It can not only judge the user's login request It can determine whether it is an illegal human-machine login, and whether the current login page has been replayed or forcibly cracked. The second response submodule of the response module sends the obfuscated authentication message of the non-first response submodule to the request module. The authentication request module interprets the obfuscated authentication message to obtain the second obfuscated authentication factor. The authentication platform backend interprets the first obfuscation protocol to obtain the first obfuscated authentication factor. At the same time, the authentication platform backend and the authentication platform frontend use a pre-agreed key algorithm to decrypt the transmitted information, and determine whether the first obfuscated authentication factor is consistent with the second obfuscated authentication factor. It can further determine whether the user's login request is a login request allowed by the response module, and prevent the occurrence of middleman behavior in the authentication module, thereby making the security of the authentication process and the detection of illegal human-machine login more sensitive, and preventing important information from being stolen and illegally used.

[0100] It should be understood by those skilled in the art that the embodiments of the present invention may be provided as methods, systems or computer program products. Therefore, the present invention may take the form of a complete hardware embodiment, a complete software embodiment or an embodiment combining software and hardware aspects. Moreover, the present invention may take the form of a computer program product implemented on one or more computer-usable storage media containing computer-usable program codes. Among them, the storage medium may be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as static random access memory (Static Random Access Memory, referred to as SRAM), electrically erasable programmable read-only memory (Electrically Erasable Programmable Read-Only Memory, referred to as EEPROM), erasable programmable read-only memory (Erasable Programmable Read Only Memory, referred to as EPROM), programmable read-only memory (Programmable Red-Only Memory, referred to as PROM), read-only memory (Read-Only Memory, referred to as ROM), magnetic memory, flash memory, magnetic disk or optical disk. These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0101] It should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention rather than to limit it. Although the present invention has been described in detail with reference to the preferred embodiments, those skilled in the art should understand that the technical solutions of the present invention may be modified or replaced by equivalents without departing from the spirit and scope of the technical solutions of the present invention, which should all be included in the scope of the claims of the present invention.

Claims

1. A cloud platform-based authentication method, characterized in that: include: Step S100, obtaining authentication request information of the request module, and matching the authentication request information with the response module to obtain a first response submodule, corresponding authentication matching information and authentication obfuscation message; Step S200: the authentication module interprets the authentication matching information and the authentication obfuscation message according to the interpretation protocol to obtain a first authentication protocol and a first obfuscation protocol; the authentication platform backend interprets the first authentication protocol and the first obfuscation protocol to obtain a first request authentication factor and a first obfuscation authentication factor; Step S300, sending the first authentication protocol and the first obfuscation protocol to the request module, the request module interprets the first authentication protocol and the first obfuscation protocol to obtain a second request authentication factor and a second obfuscation authentication factor, and sending the second request authentication factor and the second obfuscation authentication factor to the authentication platform front end; Step S400, checking the real-time behavior factor of the authentication platform front end to obtain the second behavior authentication factor, and retrieving the comparison behavior factor stored in the authentication platform back end to obtain the first behavior authentication factor; Step S500, comparing the first request authentication factor with the second request authentication factor to obtain a request authentication result, comparing the first behavior authentication factor with the second behavior authentication factor to obtain a behavior authentication result, comparing the first obfuscation authentication factor with the second obfuscation authentication factor to obtain a request obfuscation result, and jointly determining whether the authentication is successful based on the request authentication result, the behavior authentication result, and the request obfuscation result; Step S300 specifically includes: Step S301, the authentication module sends the first authentication protocol and the first obfuscation protocol to the request module; Step S302, the request module interprets and responds to the first authentication protocol and the first obfuscation protocol to obtain a second request authentication factor and a second obfuscation authentication factor; Step S303, sending the second requested authentication factor and the second obfuscated authentication factor to the authentication platform front end; Step S400 specifically includes: Step S401, retrieve the control behavior factors stored in the backend of the authentication platform, the control behavior factors include the click position, click time and movement trajectory of the mouse, extract the behavior characteristic factors according to the control behavior factors, the behavior characteristic factors include average movement speed, acceleration mode, click mode, trajectory complexity and dwell frequency; Step S402, using the behavior feature factor to train an identity authentication model based on machine learning, outputting the first behavior authentication factor, and storing the first behavior authentication factor in the authentication platform backend; Step S403: input the real-time behavior factor of the authentication platform front end into the identity authentication model to obtain a second behavior authentication factor.

2. The cloud platform-based authentication method according to claim 1, characterized in that: Step S100 specifically includes: Step S101, when the request module detects the user's request to log in, the request module generates corresponding authentication request information; Step S102, the response module matches the first response submodule based on the authentication request information; Step S103: the first response submodule sends the corresponding authentication matching information and the authentication obfuscation message generated by the second response submodule to the authentication module.

3. The cloud platform-based authentication method according to claim 2, characterized in that: Step S200 specifically includes: Step S201, the authentication module interprets the authentication matching information and the authentication obfuscation message according to the interpretation protocol to obtain a first authentication protocol and a first obfuscation protocol; Step S202: The authentication platform backend interprets the first authentication protocol and the first obfuscation protocol to obtain a first request authentication factor and a first obfuscation authentication factor.

4. The cloud platform-based authentication method according to claim 1, characterized in that: Step S500 specifically includes: Step S501, comparing the first request authentication factor with the second request authentication factor; If the first request authentication factor is consistent with the second request authentication factor, the request authentication result is authentication passed; If the first request authentication factor is inconsistent with the second request authentication factor, the request authentication result is authentication failure; Step S502, comparing the first behavior authentication factor with the second behavior authentication factor; If the first behavior authentication factor is consistent with the second behavior authentication factor, the behavior authentication result is authentication passed; If the first behavior authentication factor is inconsistent with the second behavior authentication factor, the behavior authentication result is authentication failure; Step S503, comparing the first obfuscated authentication factor with the second obfuscated authentication factor; If the first obfuscated authentication factor is consistent with the second obfuscated authentication factor, the obfuscated authentication result is authentication passed; If the first obfuscated authentication factor is consistent with the second obfuscated authentication factor, the obfuscated authentication result is that the authentication fails.

5. The cloud platform-based authentication method according to claim 4, characterized in that: Judging whether the authentication is successful based on the request authentication result, the behavior authentication result and the request obfuscation result specifically includes: When the request authentication result, the behavior authentication result and the obfuscation authentication result are all authenticated, the first response submodule opens corresponding access rights to the logged-in user; When any of the request authentication result, the behavior authentication result and the obfuscation authentication result fails authentication, the first response submodule closes the corresponding access rights for the logged-in user.

6. A cloud platform-based authentication method as claimed in claim 5, characterized in that: The response module includes a first response submodule and a second response submodule.

7. The cloud platform-based authentication method according to claim 6, characterized in that: The authentication module includes an authentication platform front end and an authentication platform back end, and the authentication platform front end and the authentication platform back end use a pre-agreed key algorithm to decrypt the transmitted information.

8. A cloud platform-based authentication system, comprising a cloud platform-based authentication method as claimed in any one of claims 1 to 7, characterized in that: Includes request module, authentication module and response module; The request module is used to issue authentication request information; The authentication module is used to check whether the authentication request information of the request module meets the authentication requirements according to the response verification information; The response module is used to send response verification information in response to the authentication request information.

Images