Security authentication method and security authentication device

Abstract

The invention provides a security authentication method and a security authentication device. The security authentication method and the security authentication device are beneficial to solving the security authentication problem of micro-service applications between cloud units. The method is applied to a system comprising a plurality of cloud units, each cloud unit comprises a cloud access platform, a security micro-engine and a micro-service application, and the method comprises the following steps: the cloud access platform receives a first request message and determines whether the access is legal based on the first request message and a first access control list, and if yes, the security micro-engine is started; encrypting the first request message by using a corresponding key in the second access control list, and sending the encrypted first request message to a first security micro-engine corresponding to the first micro-service application; and the first security micro-engine determines whether the access is legal based on the encrypted first request message and the second access control list, decrypts the encrypted first request message by adopting a corresponding key in the second access control list if the access is legal, and sends the decrypted first request message to the first micro-service application.

Description

technical field [0001] The present application relates to the field of cloud technology, and in particular, to a security authentication method and a security authentication device. Background technique [0002] With the development of public cloud, private cloud and hybrid cloud, more and more enterprises are deploying business systems under the multi-cloud microservice architecture, which consists of cloud applications and microservices from different cloud providers and geographical locations. Architecture composition. In a multi-cloud microservice architecture, there are two security threats to business systems. One is the threat of network intrusion outside the multi-cloud microservices architecture, for example, hacking; the other is the threat of security penetration in the environment in which the multi-cloud microservices architecture operates. [0003] In the prior art, security authentication schemes for microservices mostly use Token-based authentication method...

AI Technical Summary

Problems solved by technology

[0004] This application provides a security authentication method and a security authentication device, which is conducive to solving the security authentication problem of micro-service applications between different cloud units

Images