Cloud computing access method based on cross domain identity authentication

Abstract

The invention discloses a cloud computing access method based on cross domain identity authentication. The method is realized by a local identity authentication module, a local authorization decision module, a local identity and authority management module, a cross domain authority inquiring module, a third-party identity authentication module and a third-party authority service module. The cloud computing access method based on cross domain identity authentication has the following characteristics: (1) subject identity, attribute and authority information are described in a standard manner, and certification authority of a subject, authentication validity, the attribute of the subject and the authority of the subject in a targeted organization can be clear by the standard description; (2) request query related to identity authentication and response messages in cross domain identity authentication are abstracted, a standard format for different types of messages is defined, and identity information which is transmitted among different domains can be understood; and (3) confidentiality, integrity, reliability and identifiability of transmitted messages are guaranteed by a high-reliability encryption transmission mechanism, and information of authentication of users cannot be wiretapped or tampered.

Description

technical field [0001] The invention relates to the fields of cloud computing technology, identity authentication, etc., and specifically relates to a cloud computing access method based on cross-domain identity authentication. Background technique [0002] The main purpose of identity authentication technology is to verify the real identities of both communication parties and prevent illegal users from pretending to be legitimate users to access sensitive information resources. In secure network communication, all parties involved in the communication must prove their identities through some form of authentication mechanism, and verify that the user's identity is consistent with what he claims, and then the user access control and records can be realized. Cross-domain authentication means that in a cloud computing environment, resource providers and users may span different management domains, so cross-domain authentication is needed to solve the problem of mutual use of re...

AI Technical Summary

Problems solved by technology

However, when the number of management domains is relatively large, the data that each management domain needs to maintain will be very complicated, which will bring great inconvenience to the management of cross-domain identity authentication.

Images