Cloud Application Login via Terminal Password Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In cloud computing architectures, there is a security risk when a cloud application instance logs in to an application service node, as password information transmitted to the cloud can be recorded and accessed by subsequent users, compromising user privacy.
Innovation Solution
A method where the cloud application instance sends a login request to a terminal device, which obtains a login password and device identity, and sends a verification request to an account management node. The node verifies the password and sends success information to the instance, ensuring the password is not directly transmitted, using device identity to correlate with registered accounts.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the terminal device transmits password information to the cloud application instance for login, then the login process can be completed, but the password information may be recorded in the cloud application instance and accessed by subsequent users, creating a security risk
Solution Approach 1:
The patent extracts the password verification function from the cloud application instance and relocates it to the terminal device. The terminal device locally verifies the password against stored hash values, preventing the password from being transmitted to or stored in the cloud application instance. This extraction of the verification function resolves the security contradiction by maintaining login capability while eliminating password exposure risk.
Solution Approach 2:
The patent introduces a password hash as an intermediary between the actual password and the verification process. Instead of transmitting or storing the plain password, the system uses a one-way hash function to transform the password into a fixed-length string that can be verified without revealing the original password. This intermediary mechanism allows authentication to proceed while preventing password exposure.
2Ease of operation
If the cloud application instance stores password information for verification, then login verification can be performed, but the stored password information can be accessed by other users who rent the same instance, compromising user privacy
Solution Approach 1:
The patent extracts the password verification functionality from the cloud application instance and implements it locally on the terminal device. The terminal device stores the password hash and performs verification independently, eliminating the need for the cloud instance to store or access password information. This resolves the contradiction by maintaining verification capability while preventing privacy loss.
Solution Approach 2:
The terminal device performs self-service by locally storing the password hash and independently verifying passwords without requiring the cloud application instance to intervene in the verification process. This self-service approach allows the device to authenticate users while maintaining privacy, as the verification process occurs entirely on the user's own device.
Data Source
Figure 1A
Figure 1B
Figure 2A
AI summary
A login method and system based on a cloud application instance, and a related device are provided. The method includes the following steps: A cloud application instance sends a login request for an application service node to a terminal device, so that after obtaining a login password input by a user, the terminal device sends a verification request carrying the login password and a device identity of the cloud application instance to an account management node. The account management node may verify the login password, and send verification success information to the cloud application instance. The cloud application instance logs in to the application service node based on the verification success information. In the method, the user does not need to send privacy information such as an application account and a password to the cloud application instance for verification, thereby resolving a problem that there is a security risk when the user logs in to an application by using the cloud application instance.