信息安全研究 ›› 2019, Vol. 5 ›› Issue (3): 253-256.

• 技术应用 • 上一篇    下一篇

一种安全增强型云计算身份认证方案

蔡友保,冯暄,陈翼,王斯梁   

  1. 四川省计算机研究院
  • 收稿日期:2019-03-12 出版日期:2020-03-15 发布日期:2019-03-12
  • 通讯作者: 蔡友保
  • 作者简介:蔡友保,工程师,主要研究方向:云计算、网络安全;276226148@qq.com 冯暄,高级工程师,主要研究方向:云计算;feng.xuan@scsics.com 陈翼,工程师,主要研究方向:管理信息化;chen.yi@scsics.com 王斯梁,博士,高级工程师,主要研究方向:云计算、网络安全;wang.siliang@scsics.com

Research of Security Enhancement Identity Authentication Technology in Cloud Computing

  • Received:2019-03-12 Online:2020-03-15 Published:2019-03-12

摘要: 云计算环境相对于传统的IT系统具有虚拟化、多用户、分布式等新特征,现有基于“用户名+口令”的认证方式在高安全领域存在诸如易冒用和中间人攻击等风险.有鉴于此,本文提出一种在高安全环境下实现云身份认证的解决方案,在云终端中使用USBKey,利用“USBKey+PIN码”的方式实现双因子强身份认证,并结合数字证书技术,对现有远程桌面协议进行安全增强,将云终端的USBKey设备安全可控地映射至虚拟桌面中,建立虚拟桌面连接安全通道,实现用户登录云服务器强身份认证.本方案已应用到我院科技大数据平台研发中,取得较好的效果.

关键词: 云计算, USBKey, 远程桌面协议, 虚拟桌面, 身份认证方案

Abstract: Comparing with traditional IT system, cloud computing presented the new characteristics of virtualization, multiuser, distributed and so on. Most existing authentication mode such as “userid+password” faced the risks such as fraudulent use and maninthemiddle attacks in the high security field. In view of this, this paper proposed a solution for implementing cloud identity authentication in a high security environment. The USBKey is used in the cloud terminal, and the twofactor strong identity authentication is realized by utilizing the “USBKey+PIN code”, and it is combined with the digital certificate technology to enhance the existing remote desktop protocol (RDP). The USBKey is safely mapped onto the virtual desktop to estabilsh a secure connection channel. and the strong identity authentication for the user to log into the cloud server is realized. This solution issuccessfully applied to our science and technology Big Data platform of our college, and achieved good results.

Key words: cloud computing, USBKey, remote desktop protocol (RDP), VDI, authentication solution