Security authentication method for realizing multi-cloud management and control across public network

Abstract

The invention discloses a security authentication method for realizing multi-cloud management and control across a public network. The method specifically comprises the following steps: establishing abidirectional authentication network channel between a management and control cluster and a cloud computing cluster through a group of reverse proxy servers; in the management and control cluster, the management and control service directly uses an HTTP protocol to access the reverse proxy service; after the management and control cluster reverse proxy server receives the request, a self-signed SSL client certificate is used to access the reverse proxy server of the cloud computing cluster through HTTPS to complete authentication of the management and control cluster; meanwhile, the cloud computing cluster returns a self-signed server certificate, and the management and control cluster also uses the same self-signed CA certificate to complete authentication of the cloud computing cluster;and after the bidirectional authentication is completed, unloading the HTTPS protocol by the cloud computing cluster reverse proxy service, and accessing the target service by using the HTTP protocolto realize security management and control. According to the method, manpower and financial resources can be saved, the method is safer, meanwhile, the control service can realize control by directlyusing the HTTP protocol to access the reverse proxy service, and the control is flexible and convenient.

Description

technical field [0001] The invention belongs to the technical field of PAAS platforms, and in particular relates to a security authentication method for realizing multi-cloud management and control across public networks. Background technique [0002] With the progress of the times and the development of technology, the application of network and communication technology has become more and more extensive, and the problem of network security has become more and more prominent. When the management and control cluster of the PAAS cloud platform manages and controls the cloud computing cluster, there are three common scenarios: creating services, obtaining data, and setting tasks. These three scenarios all have extremely high requirements on security. Taking data acquisition as an example, if the data is eavesdropped during transmission, commercial secrets may be leaked; and if the data acquisition interface can be read by a third party at will, it will bring immeasurable loss...

AI Technical Summary

Problems solved by technology

When the scale of the cloud computing cluster to be managed is large, applying for an authoritative certificate will not only bring about large financial expenses, but also bring a lot of operation and maintenance costs that need to be replaced with expired certificates

Images