Security authentication method for realizing multi-cloud management and control across public network

Abstract

The invention discloses a security authentication method for realizing multi-cloud management and control across a public network. The method specifically comprises the following steps: a bidirectional authentication network channel between a management and control cluster and a cloud computing cluster is established through a group of reverse proxy servers; in the management and control cluster,a management and control service directly uses an HTTP protocol to access a reverse proxy service; after the reverse proxy server of the management and control cluster receives the request, a self-signed SSL client certificate is used to access the reverse proxy server of the cloud computing cluster through HTTPS to complete authentication of the management and control cluster; meanwhile, the cloud computing cluster returns the self-signed server certificate, and the management and control cluster also uses the same self-signed CA certificate to complete authentication of the cloud computing cluster; and after the bidirectional authentication is completed, the HTTPS protocol is uploaded by the cloud computing cluster reverse proxy service, and a target service is accessed by using the HTTPprotocol to realize security management and control. According to the method, manpower and financial resources can be saved, the method is safer, meanwhile, the control service can realize control bydirectly using the HTTP protocol to access the reverse proxy service, and the control is flexible and convenient.

Description

technical field [0001] The invention belongs to the technical field of PAAS platforms, and in particular relates to a security authentication method for realizing multi-cloud management and control across public networks. Background technique [0002] With the progress of the times and the development of technology, the application of network and communication technology has become more and more extensive, and the problem of network security has become more and more prominent. When the management and control cluster of the PAAS cloud platform manages and controls the cloud computing cluster, there are three common scenarios: creating services, obtaining data, and setting tasks. These three scenarios all have extremely high requirements for security. Taking data acquisition as an example, if the data is eavesdropped during transmission, commercial secrets may be leaked; and if the data acquisition interface can be read by a third party at will, it will bring immeasurable los...

AI Technical Summary

Problems solved by technology

When the scale of the cloud computing cluster to be managed is large, applying for an authoritative certificate will not only bring about large financial expenses, but also bring a lot of operation and maintenance costs that need to be replaced with expired certificates

Images