Access control method, access credential generation method, and access control system
By adding an address whitelist to the access credentials and performing source address authentication, the problem of easy leakage of cloud platform access credentials is solved, illegal network access is blocked, and the security of the cloud platform is improved.
WO2026113900A1 Publication Date: 2026-06-04CLOUD INTELLIGENCE ASSETS HOLDING (SINGAPORE) PTE LTD +1
5 Cites 0 Cited by
Patent Information
- Application Number
- PCT/CN2025/133701
- Authority / Receiving Office
- WO · WO
- Patent Type
- Applications
- Current Assignee / Owner
- Priority Date
- 2024-11-27
- Filing Date
- 2025-11-10
- Publication Date
- 2026-06-04
AI Technical Summary
Technical Problem
In existing technologies, the access credentials (AK) of cloud platforms are easily leaked, allowing attackers to illegally access the cloud platform, posing a significant security risk.
Method used
Add the target account's address whitelist to the access credentials. The cloud platform gateway performs address authentication by extracting the source address and comparing it with the whitelist. If the whitelist does not match, the access request is intercepted, and joint authentication is performed by combining key authentication.
Benefits of technology
This effectively prevents attackers from using unauthorized networks to access the cloud platform after access credentials are leaked, thus improving the security of the cloud platform.
✦ Generated by Eureka AI based on patent content.
Abstract
One or more embodiments of the present disclosure provide an access control method, an access credential generation method, and an access control system, capable of being applied to a cloud platform. Specifically, an internal trusted network range of a platform corresponding to a target account can be acquired to generate an address whitelist for the target account; and an access credential is generated for the target account on the basis of the address whitelist. A cloud platform gateway receives an access request sent by the target account, and then extracts the address whitelist of the target account from the access credential carried in the access request; and in response to a source address of the access request not matching the address whitelist, the cloud platform gateway determines that the access request does not pass address authentication, and intercepts the access request. The solution can effectively prevent an attacker from accessing a cloud platform via an unauthorized network after the leakage of an access credential, thereby improving the security of the cloud platform, and achieving platform-level access credential security management.
Need to check novelty before this filing date? Find Prior Art