Security control method used for cloud platform network

Abstract

The invention provides a security control method used for a cloud platform network. The security control method comprises the steps that: a controller of the cloud network platform performs hash operation on application layer data in a control data message based on a preset security level value, a first currently valid secret key and a predetermined hash function when sending the control data message, so as to obtain an operation result; a first part of the operation result serves as authentication data and is attached to the control data message, and the second part of the operation result serves as a new first currently valid secret key to be used in the next hash operation; and the control data message with the authentication data is sent to a target node in the cloud network platform, and the target node adopts an algorithm corresponding to the hash operation adopted by the controller to authenticate the authentication data. The security control method used for the cloud platform network disclosed by the invention has high security level.

Description

technical field [0001] The present invention relates to a security control method, and more particularly, to a security control method for a cloud platform network. Background technique [0002] At present, with the increasingly wide application of computers and networks and the increasing variety of services in different fields, it is becoming more and more important to control each node in the cloud platform network through a controller in a safe manner. [0003] In the existing technical solutions, the security control of the nodes in the cloud platform network is generally implemented in the following manner: using a security channel based on the SLL protocol as a security mechanism for data transmission between the controller and the cloud network nodes. [0004] However, the existing technical solutions have the following problems: (1) Since the control commands in the cloud network platform are usually transmitted in plain text, attackers in the network can attack the...

AI Technical Summary

Problems solved by technology

[0004] However, the existing technical solutions have the following problems: (1) Since the control commands in the cloud network platform are usually transmitted in plain text, attackers in the network can attack the entire cloud network platform by tampering with the control commands ; (2) The attacker can try to instantiate some new flow rules into the flow table of the network device to allow forged new data flows to pass, and to eavesdrop on the flows in the cloud network platform

Images