Cloud Application Instance Login Through Password-Isolated Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In cloud computing architectures, there is a security risk when cloud application instances log in to application service nodes as password information is transmitted and can be recorded, allowing unauthorized access by subsequent users.
Innovation Solution
A method where the cloud application instance sends a login request to a terminal device, which obtains a login password and device identity, and sends a verification request to an account management node for authentication, ensuring the password is not transmitted to the cloud application instance, using device identity to verify and generate success information for login.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the terminal device transmits password information to the cloud application instance for login, then the cloud application instance can log in to the application service node, but the password information may be recorded in the cloud application instance and can be obtained by other users, posing a security risk
Solution Approach 1:
The patent introduces an account management node as an intermediary between the terminal device and the cloud application instance. The terminal device sends the password to the account management node for verification instead of directly to the cloud application instance. The account management node validates the password and returns verification results, preventing the cloud application instance from directly obtaining or recording the password, thus resolving the security contradiction.
2Ease of operation
If the cloud application instance stores password information for login authentication, then login verification can be performed, but the stored password information creates security vulnerabilities when the instance is reused by different users
Solution Approach 1:
The patent extracts the password verification function from the cloud application instance and relocates it to a dedicated account management node. The cloud application instance no longer stores or processes password information, while the account management node handles all authentication operations. This separation ensures that login authentication can be performed securely without the cloud application instance having access to sensitive password data.
3Productivity
If the terminal device sends password information to the cloud application instance, then the login process can be completed, but the password transmission creates a security risk that allows unauthorized access by subsequent users
Solution Approach 1:
The account management node serves as a secure intermediary that receives password information from the terminal device, performs verification, and communicates only the verification result to the cloud application instance. This intermediary mechanism maintains efficient login processing while eliminating the security risk of password transmission to the cloud application instance, as the password never leaves the terminal device except for encrypted communication with the account management node.
Data Source
AI summary
A login method includes a cloud application instance sending a login request for an application service node to a terminal device, such that after obtaining a login password input by a user, the terminal device sends a verification request carrying the login password and a device identity of the cloud application instance to an account management node. The account management node may verify the login password, and send verification success information to the cloud application instance. The cloud application instance logs in to the application service node based on the verification success information.