CN110365492A - An authentication method, system, device and medium - Google Patents

Abstract

The invention discloses an authentication method, system, equipment and medium. The cloud computing service device pre-sets the authentication key and signature algorithm in the access device, and then when authenticating the access device, it uses its own authentication key to generate a corresponding signature algorithm for the random key. Authentication signature, and through the consistency comparison between the authentication signature and the standard signature, it is judged whether the authentication key and signature algorithm used by the access device are consistent with the preset authentication key and signature algorithm , so as to determine whether the access device is a reliable device, that is, whether the authentication passes. The method relatively ensures the accuracy and safety of the data collected by the access device, and provides a security guarantee for the data processing of the cloud computing service device. In addition, the present invention also provides an authentication system, equipment and medium, and the beneficial effect is the same as that described above.

Description

An authentication method, system, device and medium

technical field

The present invention relates to the field of cloud computing, in particular to an authentication method, system, equipment and medium.

Background technique

With the continuous development of informatization, the relationship between cloud computing and intelligent hardware devices is getting closer and closer, and edge computing has gradually become the data provision basis for distributed cloud computing. Edge computing refers to the use of intelligent hardware devices, such as edge areas close to data sources, to complete data analysis and intelligent processing. In order to continuously expand the application field of edge computing in cloud computing, it is usually necessary to access different types of intelligent hardware devices.

In order to reasonably plan the scope of use of smart hardware devices and ensure the reliability of smart hardware devices, it is currently necessary to perform authentication operations on third-party smart hardware devices, so as to ensure that the data of third-party smart hardware devices is accurate and safe. Computational data processing provides security guarantees.

It can be seen that providing an authentication method to relatively ensure the accuracy and security of data collected on third-party intelligent hardware devices and provide security guarantees for data processing of cloud computing services is a technical problem to be solved by those skilled in the art.

Contents of the invention

The purpose of the present invention is to provide an authentication method, system, device and medium to relatively ensure the accuracy and security of data collected on third-party intelligent hardware devices, and to provide security guarantees for data processing of cloud computing services.

In order to solve the above technical problems, the present invention provides an authentication method applied to cloud computing service equipment, including:

Send a random key to the access device, and receive the authentication signature returned by the access device; wherein, the authentication signature is generated by performing a predetermined signature algorithm on the random key through the pre-stored authentication key of the access device of;

Consistency comparison between the authentication signature and the pre-generated standard signature; the standard signature is generated by signing the random key with the authentication key and signature algorithm pre-stored in the system corresponding to the device information of the access device ;

When the authentication signature is consistent with the standard signature, the access device is marked as an authentication passing device.

Preferably, the generation process of the standard signature includes:

Obtain the device information of the access device;

Find the authentication key and signature algorithm corresponding to the device information locally;

Use the authentication key corresponding to the device information and the signature algorithm to sign the random key to generate a standard signature.

Preferably, before sending the random key to the access device and receiving the authentication signature returned by the access device, the method further includes:

Receiving an authentication initialization request from the access device based on the built-in authentication program; wherein, the built-in authentication program has an asymmetric encryption key that matches the cloud computing service device;

Send the authentication key and signature algorithm to the access device based on asymmetric encryption.

Preferably, receiving the authentication initialization request from the access device based on the built-in authentication program includes:

Receive an authentication initialization request containing identity information from the access device based on the built-in authentication program;

Correspondingly, the authentication key and signature algorithm are sent to the access device based on asymmetric encryption, including:

The authentication key uniquely corresponding to the identity information and the signature algorithm uniquely corresponding to the identity information are sent to the access terminal device based on an asymmetric encryption method.

Preferably, the consistency comparison between the authentication signature and the pre-generated standard signature includes:

Consistency comparison between the authentication signature and the standard signature pre-generated and imported by the authentication device.

In addition, the present invention also provides an authentication method applied to the access terminal device, including:

Receive the random key issued by the cloud computing service device;

Use the authentication key obtained in advance from the cloud computing service device to execute the signature algorithm based on the cloud computing service device preset on the random key to produce an authentication signature;

Send the authentication signature to the cloud computing service device.

In addition, the present invention also provides an authentication system, including:

The cloud computing service device is used to issue a random key to the access device, and receive the authentication signature returned by the access device; wherein, the authentication signature is a combination of the random key and the authentication key stored in the access device. The key is generated by executing a predetermined signature algorithm; the authentication signature and the pre-generated standard signature are compared for consistency; the standard signature is the authentication key and signature corresponding to the device information of the access device pre-stored in the system The random key is signed by the algorithm; when the authentication signature is consistent with the standard signature, the access device is marked as the authentication passing device;

The access terminal device is used to receive the random key issued by the cloud computing service device; use the authentication key obtained from the cloud computing service device in advance to execute the signature algorithm based on the cloud computing service device preset on the random key, Produce the authentication signature; send the authentication signature to the cloud computing service device.

In addition, the present invention also provides a cloud computing service device. The device includes a memory, a processor and a bus. The memory stores an authentication program that can be transmitted to the processor by the bus and run on the processor. The authentication program is executed by the processor. At the same time, the authentication method applied to the cloud computing service device as described above is implemented.

Preferably, the cloud computing service device is a node forming a CDN network or a block chain network.

In addition, the present invention also provides an access terminal device, which includes a memory, a processor, and a bus. The memory stores an authentication program that can be transmitted to the processor by the bus and run on the processor. The authentication program is executed by the processor. At the same time, the authentication method applied to the access terminal device as described above is implemented.

In addition, the present invention also provides a computer-readable storage medium. An authentication program is stored on the computer-readable storage medium. The authentication program can be executed by one or more processors, so as to implement the above-mentioned cloud computing service device. An authentication method, or implement the authentication method applied to the access terminal device as described above.

In addition, the present invention also provides a computer program product, including computer instructions, which, when run on a computer, enable the computer to execute the above-mentioned authentication method applied to cloud computing service equipment or the above-mentioned authentication method applied to access terminal equipment. method.

In the authentication method provided by the present invention, the cloud computing service device issues a random key to the access terminal device, and the access terminal device uses the random key issued by the cloud computing service device in advance to use the The authentication key obtained by the device executes the signature algorithm preset based on the cloud computing service device on the random key, generates an authentication signature, and sends the authentication signature to the cloud computing service device, and the cloud computing service device receives After obtaining the authentication signature, compare the authentication signature with the pre-generated standard signature. The standard signature is to use the authentication key and signature algorithm pre-stored in the system corresponding to the device information of the access device to randomly The key is signed and generated. When the authentication signature is consistent with the standard signature, the access device is marked as an authenticated device. By pre-setting the authentication key and signature algorithm in the access device, and then when authenticating the access device, it uses its own authentication key to execute the corresponding signature algorithm on the random key to generate an authentication signature. And through the consistency comparison between the authentication signature and the standard signature, it is judged whether the authentication key and signature algorithm used by the access device are consistent with the preset authentication key and signature algorithm, so as to conclude that the access Whether the input device is a reliable device, that is, whether the authentication is passed. This method relatively ensures the accuracy and safety of the data collected by the access terminal device, and provides a security guarantee for the data processing of the cloud computing service device. In addition, the present invention also provides an authentication system, equipment and medium, and the beneficial effect is the same as that described above.

Description of drawings

In order to illustrate the embodiments of the present invention more clearly, the accompanying drawings used in the embodiments will be briefly introduced below. Obviously, the accompanying drawings in the following description are only some embodiments of the present invention. As far as people are concerned, other drawings can also be obtained based on these drawings on the premise of not paying creative work.

FIG. 1 is a flow chart of an authentication method applied to a cloud computing service device provided by an embodiment of the present invention;

FIG. 2 is a flow chart of another authentication method applied to a cloud computing service device provided by an embodiment of the present invention;

FIG. 3 is a flow chart of another authentication method applied to a cloud computing service device provided by an embodiment of the present invention;

FIG. 4 is a flow chart of an authentication method applied to an access terminal device provided by an embodiment of the present invention;

FIG. 5 is a schematic structural diagram of an authentication system provided by an embodiment of the present invention.

Detailed ways

The following will clearly and completely describe the technical solutions in the embodiments of the present invention in conjunction with the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only some of the embodiments of the present invention, not all of them. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts belong to the protection scope of the present invention.

Due to the various types of intelligent hardware devices participating in edge computing in the field of distributed cloud computing, distributed cloud computing services only need to obtain the data provided by intelligent hardware devices participating in edge computing to perform cloud computing services, so in order to ensure The content of data used by cloud computing services is rich in content. Currently, data for edge computing is often provided by third-party smart hardware devices.

In order to reasonably plan the scope of use of smart hardware devices and ensure the reliability of smart hardware devices, it is currently necessary to perform authentication operations on third-party smart hardware devices that provide data to cloud computing service devices, so as to ensure that cloud computing service devices are The data collected on smart hardware devices is accurate and safe, and cannot provide security guarantees for data processing of cloud computing service devices.

The core of the present invention is to provide an authentication method, system, device and medium to relatively ensure the accuracy and safety of data collected on third-party intelligent hardware devices, and to provide security guarantees for data processing of cloud computing service devices.

In order to enable those skilled in the art to better understand the solution of the present invention, the present invention will be further described in detail below in conjunction with the accompanying drawings and specific embodiments.

FIG. 1 is a flow chart of an authentication method applied to a cloud computing service device provided by an embodiment of the present invention. Please refer to Figure 1, the specific steps of the authentication method applied to cloud computing service equipment include:

Step S10: Send a random key to the access device, and receive the authentication signature returned by the access device.

Wherein, the authentication signature is generated by executing a predetermined signature algorithm on the random key with the authentication key pre-stored in the access device.

It should be noted that the cloud computing service device refers to authenticating the access terminal. In order to ensure that the data transmitted by the access terminal device is a credible service device, the cloud computing service device needs to Before the input data is processed by cloud computing, an authentication operation is performed on the access device, that is, to verify whether the access device has the right to transmit data to the cloud computing service device. The access device in this method refers to an intelligent hardware device that processes, transmits, and stores data in the cloud computing service.

This method is the overall operation content when the cloud computing service device authenticates the access device. Before the cloud computing service device authenticates the access device, the access device should pre-store the cloud computing service device An authentication key that proves its own credible identity and the corresponding signature algorithm. When the cloud computing service device authenticates a third party, it sends a random key to the access device, and then receives the authentication signature returned by the access device. The authentication signature is the pre-stored authentication key of the access device itself. The key is generated by executing the preset signature algorithm on the random key.

Step S11: Perform consistency comparison between the authentication signature and the pre-generated standard signature.

Wherein, the standard signature is generated by signing a random key with an authentication key corresponding to the device information of the access device and a signature algorithm prestored in the system.

The device information of the access terminal may include the device number of the access terminal, the service ID executed by the access terminal, etc., which are not specifically limited here.

The standard signature in this step is generated by the cloud computing service device itself using the authentication key and signature algorithm pre-stored in the system for the access device to sign the random key. The signature algorithm and the authentication key are related to the access corresponding to the device information of the terminal device, that is to say, the cloud computing service device should know in advance the authentication key and signature algorithm used by the trusted access device to generate the authentication signature, or the cloud computing service device should The trusted access device is provided with a corresponding authentication key and signature algorithm, and then when authenticating the access device, through the pre-learned or preset authentication key and signature algorithm for the access device, Generate a standard signature based on a random key, and then compare whether the standard signature is consistent with the authentication signature, so as to know whether the currently authenticated access device has a preset authentication key and signature algorithm. The generation process of the standard signature includes: obtaining the device information of the access device; finding the authentication key and signature algorithm corresponding to the device information locally; generating a signature for the random key through the authentication key and signature algorithm corresponding to the device information Standard signature.

Step S12: When the authentication signature is consistent with the standard signature, mark the access device as an authentication-passed device.

When the authentication signature is consistent with the standard signature, it means that the currently authenticated access device has a preset authentication key and signature algorithm, so the current access device is a pre-trusted access device, and then the The access device is marked as an authenticated passing device.

In the authentication method provided by the present invention, the cloud computing service device issues a random key to the access terminal device, and the access terminal device uses the random key issued by the cloud computing service device in advance to use the The authentication key obtained by the device executes the signature algorithm preset based on the cloud computing service device on the random key, generates an authentication signature, and sends the authentication signature to the cloud computing service device, and the cloud computing service device receives After obtaining the authentication signature, compare the authentication signature with the pre-generated standard signature. The standard signature is to use the authentication key and signature algorithm pre-stored in the system corresponding to the device information of the access device to randomly The key is signed and generated. When the authentication signature is consistent with the standard signature, the access device is marked as an authenticated device. By pre-setting the authentication key and signature algorithm in the access device, and then when authenticating the access device, it uses its own authentication key to execute the corresponding signature algorithm on the random key to generate an authentication signature. And through the consistency comparison between the authentication signature and the standard signature, it is judged whether the authentication key and signature algorithm used by the access device are consistent with the preset authentication key and signature algorithm, so as to conclude that the access Whether the input device is a reliable device, that is, whether the authentication is passed. This method relatively ensures the accuracy and safety of the data collected by the access terminal device, and provides a security guarantee for the data processing of the cloud computing service device.

On the basis of the above embodiments, the present invention also provides the following series of preferred embodiments.

FIG. 2 is a flow chart of another authentication method applied to cloud computing service equipment provided by an embodiment of the present invention. Please refer to Figure 2, the specific steps of the authentication method applied to cloud computing service equipment include:

Step S20: Receive an authentication initialization request from the access device based on the built-in authentication program.

Wherein, the built-in authentication program has an asymmetric encryption key matched with the cloud computing service device.

It should be noted that the access terminal device in this embodiment initiates an authentication initialization request to the cloud computing service device through a built-in authentication program, so as to inform the cloud computing service device to inform itself of the authentication key and signature algorithm, and the authentication The authorization program can be pre-installed in the trusted access device of the cloud computing service device, and the authentication program responds to the control of the access device to generate a corresponding authentication initialization request, which is sent to the cloud computing service by the access device. device, in addition, the authentication program in this embodiment has an asymmetric encryption key that matches the cloud computing service device, that is to say, the authentication program has the encryption and decryption keys used for data interaction with the cloud computing service device. The public key, private key, and asymmetric encryption key are used for data interaction between the access device and the cloud computing service device in encrypted transmission.

Step S21: Send the authentication key and the signature algorithm to the access device based on an asymmetric encryption method.

In this step, after receiving the authentication initialization request from the trusted access device, the cloud computing service device uses asymmetric encryption to send the authentication key and signature algorithm to the access device in cipher text. in the end device. The authentication key and signature algorithm are sent to the access device through asymmetric encryption, which can prevent data from being stolen during the transmission process, relatively ensure the data security during the transmission process, and relatively guarantee the overall reliability of the authentication process sex. Since the cloud computing service device performs asymmetric encryption, and the specific implementation details of the corresponding decryption operation performed by the access terminal device are well known to those skilled in the art, the focus of this embodiment is to apply the technology of asymmetric encryption to improve authentication. reliability, so the content related to symmetric encryption and decryption will not be repeated here.

Step S22: Send a random key to the access device, and receive the authentication signature returned by the access device.

Wherein, the standard signature is generated by signing a random key with an authentication key corresponding to the device information of the access device and a signature algorithm prestored in the system.

Step S23: Perform consistency comparison between the authentication signature and the pre-generated standard signature.

Step S24: When the authentication signature is consistent with the standard signature, mark the access device as an authentication-passed device.

This embodiment relatively improves the security of the authentication key and the signature algorithm prestored in the access device, and relatively ensures the reliability of the authentication process.

FIG. 3 is a flow chart of another authentication method applied to cloud computing service equipment provided by an embodiment of the present invention. Please refer to Figure 3, the specific steps of the authentication method applied to cloud computing service equipment include:

Step S30: Receive an authentication initialization request including identity information from the access device based on the built-in authentication program.

Wherein, the built-in authentication program has an asymmetric encryption key matched with the cloud computing service device.

It should be noted that the focus of this embodiment is that the authentication initialization request sent by the access device to the cloud computing service device contains identity information, and the identity information represents the identity information of the access device, which can be specifically Product sequence (SN) code or MAC address of the access device.

Step S31: Send the authentication key uniquely corresponding to the identity information and the signature algorithm uniquely corresponding to the identity information to the access terminal device based on an asymmetric encryption method.

The focus of this step is that the cloud computing service device sends the authentication key uniquely corresponding to the identity information and the signature algorithm uniquely corresponding to the identity information to the access device based on asymmetric encryption, that is, the cloud The authentication keys and signature algorithms used by the computing service device to authenticate different access devices are different, so as to relatively ensure that each access device is unique to the cloud computing service device, and then in To a certain extent, the reliability of authenticating the access device is ensured.

Step S32: Send a random key to the access device, and receive the authentication signature returned by the access device.

Wherein, the authentication signature is generated by executing a predetermined signature algorithm on the random key with the authentication key pre-stored in the access device.

Step S33: Perform consistency comparison between the authentication signature and the pre-generated standard signature.

Wherein, the standard signature is generated by signing a random key with an authentication key corresponding to the device information of the access device and a signature algorithm prestored in the system.

Step S34: When the authentication signature is consistent with the standard signature, mark the access device as an authentication-passed device.

This embodiment further ensures the reliability of the authentication process.

On the basis of the series of implementations above, as a preferred implementation, the consistency comparison between the authentication signature and the pre-generated standard signature includes:

Consistency comparison between the authentication signature and the standard signature pre-generated and imported by the authentication device.

The key point of this embodiment is that the operation of the standard signature is performed by the access device and another device other than the cloud computing service device, that is, the authentication device, and then the standard signature generated by the operation is transmitted to the cloud computing service device, that is, In other words, the authentication device in this embodiment also pre-stores the authentication key preset for the access device and the signature algorithm preset for the access device. The purpose of the authentication device It is to support the calculation of the standard signature used in the consistency comparison of cloud computing service equipment. The computing overhead in the authorization process can relatively ensure the normal operation of the cloud computing service equipment except for authentication.

Fig. 4 is a flowchart of an authentication method applied to an access terminal device provided by an embodiment of the present invention. Please refer to Figure 4, the specific steps of the authentication method applied to the access device include:

Step S40: Receive the random key issued by the cloud computing service device.

Step S41: Using the authentication key obtained from the cloud computing service device in advance to execute the signature algorithm preset based on the cloud computing service device on the random key to generate an authentication signature.

Step S42: Send the authentication signature to the cloud computing service device.

In the authentication method provided by the present invention, the cloud computing service device issues a random key to the access terminal device, and the access terminal device uses the random key issued by the cloud computing service device in advance to use the The authentication key obtained by the device executes the signature algorithm preset based on the cloud computing service device on the random key, generates an authentication signature, and sends the authentication signature to the cloud computing service device, and the cloud computing service device receives After obtaining the authentication signature, compare the authentication signature with the pre-generated standard signature. The standard signature is to use the authentication key and signature algorithm pre-stored in the system corresponding to the device information of the access device to randomly The key is signed and generated. When the authentication signature is consistent with the standard signature, the access device is marked as an authenticated device. By pre-setting the authentication key and signature algorithm in the access device, and then when authenticating the access device, it uses its own authentication key to execute the corresponding signature algorithm on the random key to generate an authentication signature. And through the consistency comparison between the authentication signature and the standard signature, it is judged whether the authentication key and signature algorithm used by the access device are consistent with the preset authentication key and signature algorithm, so as to conclude that the access Whether the input device is a reliable device, that is, whether the authentication is passed. This method relatively ensures the accuracy and safety of the data collected by the access terminal device, and provides a security guarantee for the data processing of the cloud computing service device.

The embodiment of the authentication method has been described in detail above, and the present invention also provides a cloud computing service device corresponding to the method. Since the embodiments of the cloud computing service device part and the embodiments of the method part correspond to each other, For the embodiment of the cloud computing service equipment part, please refer to the description of the embodiment of the method part, which will not be repeated here.

A cloud computing service device provided by an embodiment of the present invention includes a memory, a processor, and a bus. The memory stores an authentication program that can be transmitted to the processor by the bus and run on the processor. When the authentication program is executed by the processor Realize the above-mentioned authentication method applied to cloud computing service equipment.

The cloud computing service device may be a node forming a CDN network or a block chain network.

Wherein, the memory includes at least one type of readable storage medium, and the readable storage medium includes flash memory, hard disk, multimedia card, card-type memory (eg, SD or DX memory, etc.), magnetic memory, magnetic disk, optical disk, etc. In some embodiments, the storage may be an internal storage unit of the cloud computing service device, such as a hard disk of the cloud computing service device. In other embodiments, the memory may also be an external storage device of the cloud computing service device, such as a plug-in hard disk equipped on the cloud computing service device, a smart memory card (Smart Media Card, SMC), a secure digital (Secure Digital, SD ) card, flash memory card (Flash Card), etc. Further, the storage may also include both an internal storage unit of the cloud computing service device and an external storage device. The memory can not only be used to store application software and various data installed in cloud computing service equipment, such as the code of video transcoding program, etc., but also can be used to temporarily store data that has been output or will be output.

In some embodiments, the processor may be a central processing unit (Central Processing Unit, CPU), a controller, a microcontroller, a microprocessor or other data processing chips for running program codes stored in the memory or processing data, For example, execute a video transcoding program, etc.

The bus may be a peripheral component interconnect standard (PCI for short) bus or an extended industry standard architecture (EISA for short) bus or the like. The bus can be divided into address bus, data bus, control bus and so on.

The cloud computing service device provided by the present invention sends a random key to the access device, and the access device uses the authentication key previously obtained from the cloud computing service device after receiving the random key issued by the cloud computing service device. The authorization key executes the signature algorithm preset based on the cloud computing service device on the random key, generates an authentication signature, and sends the authentication signature to the cloud computing service device, and the cloud computing service device receives the authentication signature Finally, compare the authentication signature with the pre-generated standard signature, where the standard signature uses the authentication key and signature algorithm pre-stored in the system corresponding to the device information of the access device to sign the random key generated, and when the authentication signature is consistent with the standard signature, the access device is marked as an authenticated device. By pre-setting the authentication key and signature algorithm in the access device, and then when authenticating the access device, it uses its own authentication key to execute the corresponding signature algorithm on the random key to generate an authentication signature. And through the consistency comparison between the authentication signature and the standard signature, it is judged whether the authentication key and signature algorithm used by the access device are consistent with the preset authentication key and signature algorithm, so as to conclude that the access Whether the input device is a reliable device, that is, whether the authentication is passed. This device relatively ensures the accuracy and security of the data collected by the access device, and provides a security guarantee for the data processing of the cloud computing service device.

In addition, the present invention also provides an access terminal device. The access terminal device provided by the embodiment of the present invention includes a memory, a processor, and a bus. The memory stores data that can be transmitted to the processor by the bus and run on the processor. The authentication program, when the authentication program is executed by the processor, implements the above-mentioned authentication method applied to the access terminal device.

After receiving the random key issued by the cloud computing service device, the access terminal device uses the authentication key obtained in advance from the cloud computing service device to execute a signature based on the cloud computing service device's preset settings on the random key. Algorithm to generate an authentication signature, and send the authentication signature to the cloud computing service device. After receiving the authentication signature, the cloud computing service device will compare the authentication signature with the pre-generated standard signature. Among them, The standard signature is generated by signing the random key with the authentication key corresponding to the device information of the access device pre-stored in the system and the signature algorithm. When the authentication signature is consistent with the standard signature, the access device will be marked as for authenticated devices. By pre-setting the authentication key and signature algorithm in the access device, and then when authenticating the access device, it uses its own authentication key to execute the corresponding signature algorithm on the random key to generate an authentication signature. And through the consistency comparison between the authentication signature and the standard signature, it is judged whether the authentication key and signature algorithm used by the access device are consistent with the preset authentication key and signature algorithm, so as to conclude that the access Whether the input device is a reliable device, that is, whether the authentication is passed. This device relatively ensures the accuracy and security of the data collected by the access device, and provides a security guarantee for the data processing of the cloud computing service device.

FIG. 5 is a schematic structural diagram of an authentication system provided by an embodiment of the present invention.

As shown in Figure 5, the authentication system provided by the present invention includes:

The cloud computing service device 10 is configured to issue a random key to the access device 11, and receive the authentication signature returned by the third-party device 11; wherein, the authentication signature is the authentication key pre-stored by the access device 11 The key is generated by performing a predetermined signature algorithm on the random key; the authentication signature and the pre-generated standard signature are compared for consistency; wherein, the standard signature is sent to the access terminal device 11 through the preset authentication key. The random key is generated by a preset signature algorithm for the access device 11; when the authentication signature is consistent with the standard signature, the access device 11 is marked as an authentication pass device;

The access terminal device 11 is used to receive the random key issued by the cloud computing service device 10; use the authentication key obtained from the cloud computing service device 10 in advance to execute the random key based on the cloud computing service device 10 preset The signature algorithm is used to generate an authentication signature; and the authentication signature is sent to the cloud computing service device 10.

In the authentication system provided by the present invention, the cloud computing service device issues a random key to the access terminal device, and the access terminal device uses the random key issued by the cloud computing service device to use the The authentication key obtained by the device executes the signature algorithm preset based on the cloud computing service device on the random key, generates an authentication signature, and sends the authentication signature to the cloud computing service device, and the cloud computing service device receives After obtaining the authentication signature, compare the authentication signature with the pre-generated standard signature. The standard signature is to use the authentication key and signature algorithm pre-stored in the system corresponding to the device information of the access device to randomly The key is signed and generated. When the authentication signature is consistent with the standard signature, the access device is marked as an authenticated device. By pre-setting the authentication key and signature algorithm in the access device, and then when authenticating the access device, it uses its own authentication key to execute the corresponding signature algorithm on the random key to generate an authentication signature. And through the consistency comparison between the authentication signature and the standard signature, it is judged whether the authentication key and signature algorithm used by the access device are consistent with the preset authentication key and signature algorithm, so as to conclude that the access Whether the input device is a reliable device, that is, whether the authentication is passed. This system relatively ensures the accuracy and safety of the data collected by the access device, and provides a security guarantee for the data processing of the cloud computing service device.

In addition, the present invention also provides a computer-readable storage medium, on which a computing terminal data processing program is stored, and the computing terminal data processing program can be executed by one or more processors, so as to realize the application as above An authentication method for a cloud computing service device or an authentication method applied to an access terminal device.

In the computer-readable storage medium provided by the present invention, the cloud computing service device sends a random key to the access device, and the access device uses the random key issued by the cloud computing service device in advance to the cloud The authentication key obtained by the computing service device executes the signature algorithm preset based on the cloud computing service device on the random key, generates an authentication signature, and sends the authentication signature to the cloud computing service device, and the cloud computing service device After receiving the authentication signature, compare the authentication signature with the pre-generated standard signature, where the standard signature uses the authentication key and signature algorithm pre-stored in the system corresponding to the device information of the access device It is generated by signing the random key, and when the authentication signature is consistent with the standard signature, the access device is marked as an authentication-passed device. By pre-setting the authentication key and signature algorithm in the access device, and then when authenticating the access device, it uses its own authentication key to execute the corresponding signature algorithm on the random key to generate an authentication signature. And through the consistency comparison between the authentication signature and the standard signature, it is judged whether the authentication key and signature algorithm used by the access device are consistent with the preset authentication key and signature algorithm, so as to conclude that the access Whether the input device is a reliable device, that is, whether the authentication is passed. The computer-readable storage medium relatively ensures the accuracy and safety of the data collected by the access device, and provides a security guarantee for the data processing of the cloud computing service device.

The authentication method, system, equipment and medium provided by the present invention have been introduced in detail above. Each embodiment in the description is described in a progressive manner, each embodiment focuses on the difference from other embodiments, and the same and similar parts of each embodiment can be referred to each other. As for the device disclosed in the embodiment, since it corresponds to the method disclosed in the embodiment, the description is relatively simple, and for the related information, please refer to the description of the method part. It should be pointed out that for those skilled in the art, without departing from the principles of the present invention, some improvements and modifications can be made to the present invention, and these improvements and modifications also fall within the protection scope of the claims of the present invention.

It should also be noted that in this specification, relative terms such as first and second are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply that these entities or operations There is no such actual relationship or order between the operations. Furthermore, the term "comprises", "comprises" or any other variation thereof is intended to cover a non-exclusive inclusion such that a process, method, article, or apparatus comprising a set of elements includes not only those elements, but also includes elements not expressly listed. other elements of or also include elements inherent in such a process, method, article, or device. Without further limitations, an element defined by the phrase "comprising a ..." does not exclude the presence of additional identical elements in the process, method, article or apparatus comprising said element.

Claims (11)

1. An authentication method, characterized in that, comprising: Sending a random key to the access device, and receiving the authentication signature returned by the access device; wherein, the authentication signature is that the access device pairs the random The key is generated by executing a predetermined signature algorithm; Perform a consistency comparison between the authentication signature and the pre-generated standard signature; wherein, the standard signature uses the authentication key and signature algorithm pre-stored in the system corresponding to the device information of the access device to compare the Generated by signing with the above random key; When the authentication signature is consistent with the standard signature, mark the access device as an authentication-passed device. 2. The authentication method according to claim 1, wherein the generating process of the standard signature comprises: Acquiring device information of the access device; Search locally for the authentication key and signature algorithm corresponding to the device information; The standard signature is generated by signing the random key by using an authentication key corresponding to the device information and a signature algorithm. 3. The authentication method according to claim 1, wherein, before sending the random key to the access device and receiving the authentication signature returned by the access device, the method further includes: include: Receiving an authentication initialization request from the access device based on a built-in authentication program; wherein the built-in authentication program has an asymmetric encryption key that matches the cloud computing service device; Send the authentication key and the signature algorithm to the access device based on an asymmetric encryption method. 4. The authentication method according to claim 3, wherein the receiving the authentication initialization request from the access device based on the built-in authentication program includes: receiving the authentication initialization request including identity information sent by the access device based on the built-in authentication program; Correspondingly, the sending the authentication key and the signature algorithm to the access device based on an asymmetric encryption method includes: Sending the authentication key uniquely corresponding to the identity information and the signature algorithm uniquely corresponding to the identity information to the access terminal device in an asymmetric encryption manner. 5. The authentication method according to any one of claims 1 to 4, wherein the consistency comparison between the authentication signature and the pre-generated standard signature comprises: Consistency comparison is performed on the authentication signature and the standard signature pre-generated and imported by the authentication device. 6. An authentication method, characterized in that, comprising: Receive the random key issued by the cloud computing service device; Executing a signature algorithm preset based on the cloud computing service device on the random key using the authentication key obtained in advance from the cloud computing service device to generate an authentication signature; Send the authentication signature to the cloud computing service device. 7. An authentication system, characterized in that it comprises: The cloud computing service device is configured to issue a random key to the access device, and receive the authentication signature returned by the access device; wherein, the authentication signature is the authentication signature pre-stored by the access device. The random key is generated by performing a predetermined signature algorithm on the random key; the consistency comparison between the authentication signature and the pre-generated standard signature is carried out; The random key is generated by signing the random key with the authentication key corresponding to the device information of the access device and the signature algorithm; when the authentication signature is consistent with the standard signature, the access device is marked as an authentication key. right through the device; The access terminal device is configured to receive a random key issued by the cloud computing service device; use the authentication key obtained from the cloud computing service device in advance to execute the random key based on the cloud computing service The signature algorithm preset by the device generates an authentication signature; and sends the authentication signature to the cloud computing service device. 8. A cloud computing service device, characterized in that the device includes a memory, a processor and a bus, and the memory stores authentication information that can be transmitted to the processor by the bus and run on the processor. An authorization program, which implements the authentication method according to any one of claims 1 to 5 when the authentication program is executed by the processor. 9. The cloud computing service device according to claim 8, wherein the cloud computing service device is a node forming a CDN network or a block chain network. 10. An access terminal device, characterized in that the device includes a memory, a processor, and a bus, and the memory stores authentication information that can be transmitted to the processor by the bus and run on the processor. An authorization program, which implements the authentication method as claimed in claim 6 when the authentication program is executed by the processor. 11. A computer-readable storage medium, wherein an authentication program is stored on the computer-readable storage medium, and the authentication program can be executed by one or more processors, so as to realize the 5. The authentication method described in any one, or realize the authentication method described in claim 6.