WO2022042504A1

WO2022042504A1 - Cloud desktop access authentication method, electronic device, and computer readable storage medium

Info

Publication number: WO2022042504A1
Application number: PCT/CN2021/114159
Authority: WO
Inventors: 谢迪; 管天云
Original assignee: 中兴通讯股份有限公司
Priority date: 2020-08-24
Filing date: 2021-08-23
Publication date: 2022-03-03
Also published as: CN114091002A

Abstract

A cloud desktop access authentication method, an electronic device, and a computer readable storage medium. The method comprises: receiving a cloud desktop access request of a client terminal, the cloud desktop access request carrying user authentication information obtained by the client terminal from USB-Key (S110); generating a first dynamic password according to the cloud desktop access request, and sending the user authentication information and the first dynamic password to a cloud service terminal, so that the cloud service terminal verifies the user authentication information and saves the first dynamic password (S120); receiving verification information sent by the cloud service terminal according to the user authentication information (S130); and sending the first dynamic password to a preset password receiving device, so that the client terminal obtains, according to the first dynamic password received by the preset password receiving device, the permission of accessing the cloud desktop from the cloud service terminal (S140).

Description

Cloud desktop access authentication method, electronic device and computer-readable storage medium

CROSS-REFERENCE TO RELATED APPLICATIONS

This application is based on the Chinese patent application with the application number of 202010856614.5 and the application date of August 24, 2020, and claims the priority of the Chinese patent application. The entire content of the Chinese patent application is incorporated herein by reference.

technical field

The present application relates to the technical field of cloud terminals, and in particular to a cloud desktop access authentication method, an electronic device, and a computer-readable storage medium.

Background technique

At present, many users choose to store important data such as files and data on the cloud service terminal, and access the data stored in the cloud service terminal by logging in to the cloud desktop. Many users are easily hacked due to the weak password strength set. Once the account password is leaked, it will bring serious consequences. Therefore, higher requirements are placed on the security of authorized access to cloud desktops.

SUMMARY OF THE INVENTION

The following is an overview of the topics detailed in this article. This summary is not intended to limit the scope of protection of the claims.

Embodiments of the present application provide a cloud desktop access authentication method, an electronic device, and a computer-readable storage medium.

In a first aspect, an embodiment of the present application provides a cloud desktop access authentication method, which is applied to an authentication auxiliary terminal. The method includes: receiving a cloud desktop access request from a client terminal, where the cloud desktop access request is carried by the client terminal. User authentication information obtained from the USB-Key; generate a first dynamic password according to the cloud desktop access request, and send the user authentication information and the first dynamic password to the cloud service terminal, so that the cloud service terminal Verifying the user authentication information and saving the first dynamic password; receiving the verification information sent by the cloud service terminal according to the user authentication information; in the case that the verification information indicates that the user authentication information has passed the verification , sending the first dynamic password to a preset password receiving device, so that the client terminal obtains access to the cloud from the cloud service terminal according to the first dynamic password received by the preset password receiving device desktop permissions.

In a second aspect, an embodiment of the present application provides a cloud desktop access authentication method, which is applied to a cloud service terminal. The method includes: receiving user authentication information and a first dynamic password sent by an authentication assistant terminal; Carry out verification, and in the case that the verification of the user authentication information is passed, send verification information indicating that the verification of the user authentication information is passed to the authentication auxiliary terminal; save the first dynamic password; receive the second dynamic password sent by the client terminal password, match the second dynamic password sent by the client terminal with the stored first dynamic password, and when the second dynamic password sent by the client terminal matches the stored first dynamic password If it matches, grant the client terminal the right to access the cloud desktop.

In a third aspect, an embodiment of the present application provides a cloud desktop access authentication method, which is applied to a client terminal, where the client terminal is connected with a USB-Key, and the method includes: obtaining user authentication information from the USB-Key; The authentication assistant terminal sends a cloud desktop access request, wherein the cloud desktop access request carries the user authentication information; according to the preset password, the first dynamic password received by the device and sent by the authentication assistant terminal is sent to the cloud service The terminal sends the second dynamic password to obtain the permission to access the cloud desktop from the cloud service terminal.

In a fourth aspect, an embodiment of the present application provides an electronic device, including a memory, a processor, and a computer program stored in the memory and running on the processor, the processor implements the above-mentioned program when the processor executes the program The steps of the cloud desktop access authentication method.

In a fifth aspect, an embodiment of the present application provides a computer-readable storage medium storing computer-executable instructions, where the computer-executable instructions are used to execute the steps of the cloud desktop access authentication method as described above.

Other features and advantages of the present application will be set forth in the description which follows, and in part will be apparent from the description, or may be learned by practice of the present application. The objectives and other advantages of the application may be realized and attained by the structure particularly pointed out in the description, claims and drawings.

Description of drawings

The accompanying drawings are used to provide a further understanding of the technical solutions of the present application, and constitute a part of the specification. They are used to explain the technical solutions of the present application together with the embodiments of the present application, and do not constitute a limitation on the technical solutions of the present application.

FIG. 1 is a system architecture diagram of applying the cloud desktop access authentication method provided by an embodiment of the present application;

2 is a flowchart of a cloud desktop access authentication method provided by an embodiment of the present application;

3 is a flowchart of a cloud desktop access authentication method provided by another embodiment of the present application;

4 is a flowchart of a cloud desktop access authentication method provided by another embodiment of the present application;

FIG. 5 is a flowchart of a cloud desktop access authentication method according to the present application.

FIG. 6 is a schematic structural diagram of an electronic device provided by an embodiment of the present application.

detailed description

In order to make the purpose, technical solutions and advantages of the present application more clearly understood, the present application will be described in further detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application, but not to limit the present application.

It should be understood that in the description of the embodiments of the present application, if there is a description of "first", "second", etc., it is only for the purpose of distinguishing technical features, and should not be understood as indicating or implying relative importance or implicitly indicating that The number of indicated technical features or implicitly indicates the order of the indicated technical features. "At least one" means one or more, and "plurality" means two or more. "And/or", which describes the association relationship of the associated objects, indicates that there can be three kinds of relationships, for example, A and/or B, which can indicate the existence of A alone, the existence of A and B at the same time, and the existence of B alone. where A and B can be singular or plural. The character "/" generally indicates that the associated objects are an "or" relationship. "At least one of the following" and similar expressions refer to any combination of these items, including any combination of single or plural items. For example, at least one of a, b, and c may represent: a, b, c, a and b, a and c, b and c or a and b and c, where a, b, c may be single, or Can be multiple.

In addition, the technical features involved in the various embodiments of the present application described below can be combined with each other as long as there is no conflict with each other.

A cloud desktop refers to a cloud service terminal that generates resources such as operating systems and applications running on a virtual computer through virtualization technology, and can remotely provide a user interface to a client terminal. After adopting the cloud desktop, users can log in to the cloud desktop through the network at any place and at any time through different terminal devices to access the resources stored in the cloud.

At present, the process for a user to log in to the cloud desktop is roughly as follows: First, the user enters the URL of the cloud service terminal (ie, the cloud server) in the browser of the client terminal, and opens the login page of the cloud server; The account and password registered in the server, and the cloud server will authenticate the account and password entered by the user, and after the authentication is passed, send the main page of the cloud server to the terminal where the user is located; among them, the main page of the above cloud server There is a login link of the cloud desktop; when the user clicks the login link of the cloud desktop, the cloud server will send the login page of the cloud desktop to the user's terminal; and the user enters the registered cloud desktop in the login page of the cloud desktop When the account and password are entered, the cloud desktop performs authority authentication for the account and password; after the authentication is passed, the cloud server generates a cloud desktop that the user has the authority to, and sends it to the user's client terminal. In the above technical solution, the bearing method of user identity information is too simple, and it is easy to be obtained by others; although two authentications are performed, the information for each verification is the same, and the reliability cannot be guaranteed.

Based on the above analysis, embodiments of the present application provide a cloud desktop access authentication method, an electronic device, and a computer-readable storage medium, which are used to improve the security of cloud desktop access authentication.

FIG. 1 shows a system architecture diagram of applying the cloud desktop access authentication method provided by the embodiment of the present application. The system architecture includes a client terminal, an authentication assistant terminal and a cloud service terminal, and communication and interaction can be performed between the client terminal, the authentication assistant terminal and the cloud service terminal. The authentication auxiliary terminal and the cloud service terminal may be set in the cloud, and the authentication auxiliary terminal and the cloud service terminal may be mutually independent server devices, or may be two virtual machines set on the same server device. The device form of the client terminal can be an ordinary computer, a tablet computer, a smart phone, etc., and the client terminal can be connected to a USB-Key device.

FIG. 2 shows a flowchart of a cloud desktop access authentication method provided by an embodiment of the present application. The method is applied to the authentication auxiliary terminal, as shown in FIG. 2 , the method includes the following steps:

S110: Receive a cloud desktop access request from the client terminal, where the cloud desktop access request carries the user authentication information obtained by the client terminal from the USB-Key.

As an example, when the user needs to log in to the cloud desktop for access, insert the USB-Key into the client terminal, and click the login link of the cloud desktop on the client terminal. When the user clicks the login link of the cloud desktop, the client terminal obtains the user from the USB-Key. authentication information, encapsulate the user authentication information into the cloud desktop access request message, and send the cloud desktop access request message carrying the user authentication information to the authentication assistant terminal, so that the authentication assistant terminal receives the cloud desktop access request, and Send the user authentication information from the USB-Key carried in the cloud desktop access request to the cloud service terminal for verification.

As an example, the user authentication information in step S110 includes a user identification code, which may be in the form of a string and is pre-stored in the USB-Key and the cloud service terminal for matching verification.

S120: Generate a first dynamic password according to the cloud desktop access request, and send the user authentication information and the first dynamic password to the cloud service terminal, so that the cloud service terminal verifies the user authentication information and saves the first dynamic password.

As an example, after receiving the cloud desktop access request from the client, the authentication assistant terminal generates a first dynamic password, extracts user authentication information from the cloud desktop access request, and sends the above-mentioned first dynamic password and user authentication information together. Cloud service terminal. After receiving the first dynamic password and user authentication information from the authentication auxiliary terminal, the cloud service terminal saves and verifies the user authentication information, and returns the verification information indicating the verification result to the authentication auxiliary terminal. In addition, the cloud service terminal stores the above-mentioned first dynamic password.

It should be understood that the first dynamic password may be a character string randomly generated by the authentication assistant terminal, and the character string may include one or more of numbers, letters, and symbols.

S130: Receive verification information sent by the cloud service terminal according to the user authentication information.

As an example, the authentication assistance terminal receives the verification information sent by the cloud service terminal, where the verification information is used to indicate the verification result of the user authentication information by the cloud service terminal.

S140, in the case that the verification information indicates that the verification of the user authentication information is passed, send the first dynamic password to the preset password receiving device, so that the client terminal receives the first dynamic password received by the device according to the preset password from the cloud service The terminal obtains the permission to access the cloud desktop.

As an example, if the verification information received by the authentication assistant terminal from the cloud service terminal indicates that the verification of the user authentication information is passed, the above-mentioned first dynamic password is sent to the preset password receiving device.

The password receiving device may be a mobile phone terminal corresponding to the mobile phone number reserved by the user. For example, when the user authentication information is verified by the cloud service terminal, the authentication assistant terminal sends the first dynamic password to the user's mobile phone terminal. The mobile phone number of the mobile phone terminal is reserved when the user registers, and the user obtains the first dynamic password from the mobile phone terminal. a dynamic password, and then enter a second dynamic password that is the same as the first dynamic password on the client terminal, and the client terminal sends the second dynamic password entered by the user to the cloud service terminal, so that the cloud service terminal uses the second dynamic password Comparing with the previously saved first dynamic password, if the second dynamic password matches the previously saved first dynamic password, the client terminal is granted the right to access the cloud desktop.

In some embodiments, before step S110, the method of this embodiment of the present application further includes: receiving the user name and access password sent by the client terminal, and matching the user name and the access password; The cloud desktop access request generates a first dynamic password.

For example, when the user needs to log in to the cloud desktop, the user enters the URL of the cloud service terminal in the browser of the client terminal, and logs in to the access page of the cloud service terminal through the registered user name and access password; the client terminal obtains the user name and access page entered by the user. The password is sent to the authentication assistant terminal, and the authentication assistant terminal matches the user name with the access password. If they match, the user is allowed to log in to the access page of the cloud service terminal; after the user enters the access page of the cloud service terminal, click the login of the cloud desktop link to send the cloud desktop access request to the authentication auxiliary terminal; the authentication auxiliary terminal receives the cloud desktop access request sent by the client terminal, and generates the first dynamic password according to the cloud desktop access request; if it does not match, it can return an instruction to reject the cloud desktop access request The prompt information is sent to the client terminal.

Of course, it is also possible that the user directly enters the access page of the cloud service terminal by entering the website address of the cloud service terminal in the browser of the client terminal, and a login box for inputting the user name and access password is set on the access page, and the cloud service terminal is set in the login box. Desktop login link button, the user clicks the login link button after entering the user name and access password in the login box to send a cloud desktop access request to the authentication assistant terminal; the client terminal obtains the user's user name and access password, and associates the user name and access password with the The user authentication information is encapsulated into the cloud desktop access request and sent to the authentication assistant terminal. The authentication assistant terminal matches the user name and the access password. If they match, the first dynamic password is generated according to the cloud desktop access request; A prompt message indicating that the cloud desktop access request is rejected can be returned to the client terminal.

In some embodiments, after step S140, the method of this embodiment of the present application further includes: when the first dynamic password is sent to the client terminal, canceling the first dynamic password to avoid the first dynamic password from being stolen or repeated use.

FIG. 3 shows a flowchart of a cloud desktop access authentication method provided by an embodiment of the present application. The method is applied to a cloud service terminal, as shown in Figure 3, the method includes the following steps:

S210: Receive user authentication information and a first dynamic password sent by the authentication assistant terminal.

As an example, when the user needs to log in to the cloud desktop for access, insert the USB-Key into the client terminal, and click the login link of the cloud desktop on the client terminal. When the user clicks the login link of the cloud desktop, the client terminal obtains the user from the USB-Key. authentication information, encapsulate the user authentication information into the cloud desktop access request message, and send the cloud desktop access request message carrying the user authentication information to the authentication assistant terminal, so that the authentication assistant terminal receives the cloud desktop access request, and The authentication assistant terminal sends the user authentication information from the USB-Key carried in the cloud desktop access request to the cloud service terminal for verification.

S220: Verify the user authentication information, and send verification information indicating that the user authentication information is verified to be passed to the authentication assistant terminal in the case that the user authentication information is verified successfully.

As an example, after receiving the user authentication information sent by the authentication assistance terminal, the cloud service terminal searches locally for pre-stored user authentication information that matches the user authentication information; if it finds matching pre-stored user authentication information, it means that the user authentication information sent by the authentication assistance terminal If the verification of the authentication information is passed, the cloud service terminal returns the verification information indicating that the verification of the user authentication information is passed to the authentication auxiliary terminal; if no matching pre-stored user authentication information is found, it means that the verification of the user authentication information sent by the authentication auxiliary terminal fails, and the cloud service terminal sends the verification information to the auxiliary terminal. The authentication assistant terminal returns verification information indicating that the verification of the user authentication information fails to the authentication assistant terminal.

S230, save the first dynamic password.

As an example, when the cloud service terminal determines that the verification of the user authentication information is passed, the cloud service terminal saves the first dynamic password sent by the authentication assistant terminal for verifying the second dynamic password sent by the client terminal in the subsequent steps.

S240: Receive the second dynamic password sent by the client terminal, and match the second dynamic password sent by the client terminal with the stored first dynamic password. When the second dynamic password sent by the client terminal matches the stored first dynamic password, Grant the client terminal the permission to access the cloud desktop.

As an example, after receiving the verification information from the cloud service terminal indicating that the verification of the user authentication information is passed, the authentication assistant terminal sends the first dynamic password to the preset password receiving device. The password receiving device may be a mobile phone terminal corresponding to the mobile phone number reserved by the user. For example, when the user authentication information is verified by the cloud service terminal, the authentication assistant terminal sends the first dynamic password to the user's mobile phone terminal. The mobile phone number of the mobile phone terminal is reserved when the user registers, and the user obtains the first dynamic password from the mobile phone terminal. a dynamic password, and then input a second dynamic password that is the same as the first dynamic password on the client terminal, and the client terminal sends the second dynamic password input by the user to the cloud service terminal.

After receiving the second dynamic password sent by the client terminal, the cloud service terminal matches and compares the second dynamic password with the previously saved first dynamic password. If the second dynamic password matches the previously saved first dynamic password, The client terminal is granted the permission to access the cloud desktop; if the second dynamic password fails to match the previously saved first dynamic password, an indication message indicating that the authentication of the permission to access the cloud desktop fails is returned to the client terminal.

FIG. 4 shows a flowchart of a cloud desktop access authentication method provided by an embodiment of the present application. The method is applied to a client terminal, and the client terminal is linked with a USB-Key, as shown in FIG. 4 , the method includes the following steps:

S310, obtain user authentication information from the USB-Key.

As an example, when the user needs to log in to the cloud desktop for access, insert the USB-Key into the client terminal, and click the login link of the cloud desktop on the client terminal. When the user clicks the login link of the cloud desktop, the client terminal obtains the user from the USB-Key. Certification Information.

S320: Send a cloud desktop access request to the authentication assistant terminal, where the cloud desktop access request carries user authentication information.

As an example, when the user clicks the login link of the cloud desktop, the client terminal generates a cloud desktop access request message, and encapsulates the user authentication information obtained from the USB-Key into the cloud desktop access request message; the client terminal will carry the user authentication information The cloud desktop access request message of the information is sent to the authentication assistant terminal, so that the authentication assistant terminal receives the cloud desktop access request, and sends the user authentication information from the USB-Key carried in the cloud desktop access request to the cloud service terminal for verification.

S330: Send a second dynamic password to the cloud service terminal according to the first dynamic password sent by the authentication assistant terminal and received by the preset password receiving device, so as to obtain the permission to access the cloud desktop from the cloud service terminal.

As an example, the authentication assistant terminal will generate a first dynamic password according to the cloud desktop access request of the client terminal, and send the first dynamic password and the user authentication information to the cloud service terminal; the cloud service terminal verifies the user authentication information, if the verification Pass, save the first dynamic password, and return the verification information indicating that the user authentication information has passed the verification to the authentication assistant terminal; after the verification assistant terminal determines that the user authentication information has passed the verification according to the verification information, it sends the previously generated first dynamic password to the authentication assistant terminal. User preset password receiving device. The password receiving device may be a mobile phone terminal corresponding to the mobile phone number reserved by the user. For example, when the user authentication information is verified by the cloud service terminal, the authentication assistant terminal sends the first dynamic password to the user's mobile phone terminal. The mobile phone number of the mobile phone terminal is reserved when the user registers, and the user obtains the first dynamic password from the mobile phone terminal. a dynamic password, and then enter a second dynamic password that is the same as the first dynamic password on the client terminal, and the client terminal sends the second dynamic password entered by the user to the cloud service terminal, so that the cloud service terminal uses the second dynamic password Comparing with the previously saved first dynamic password, if the second dynamic password matches the previously saved first dynamic password, the client terminal is granted the right to access the cloud desktop.

In some embodiments, the method of this embodiment of the present application further includes: acquiring a user name and an access password input by a user, and sending the user name and access password to the authentication assistant terminal, so that the authentication assistant terminal can match the user name and the access password when the user name and the access password match. A first dynamic password is generated according to the cloud desktop access request.

In some embodiments, the user authentication information includes a user identification code, and the user identification code may be in the form of a string and is pre-stored in the USB-Key and the cloud service terminal for matching verification.

As shown in FIG. 5 , in order to facilitate understanding of the method of the embodiment of the present application, the following describes the cloud desktop access authentication method provided by the embodiment of the present application through a specific example.

S410, the client terminal obtains user authentication information from the USB-Key;

S420, the client terminal sends a cloud desktop access request to the authentication assistant terminal, wherein the cloud desktop access request carries user authentication information;

S430, the authentication assistant terminal receives the cloud desktop access request from the client terminal, generates a first dynamic password according to the cloud desktop access request, and sends the user authentication information and the first dynamic password to the cloud service terminal;

S440: The cloud service terminal receives the user authentication information and the first dynamic password sent by the authentication assistant terminal, verifies the user authentication information, and sends verification information indicating that the user authentication information has passed the verification to the authentication assistant if the user authentication information is verified successfully. terminal;

S450, the authentication auxiliary terminal receives the verification information sent by the cloud service terminal according to the user authentication information, and sends the first dynamic password to a preset password receiving device in the case that the verification information indicates that the user authentication information is verified successfully;

S460, the client terminal sends the second dynamic password to the cloud service terminal according to the first dynamic password sent by the authentication assistant terminal and received by the preset password receiving device;

S470: The cloud service terminal receives the second dynamic password sent by the client terminal, and matches the second dynamic password sent by the client terminal with the stored first dynamic password. When the second dynamic password sent by the client terminal matches the stored first dynamic password If it matches, grant the client terminal the permission to access the cloud desktop.

The solution of the embodiment of the present application, on the one hand, verifies the identity of the operating user currently operating the client based on the highly secure USB-Key user authentication information, and then determines whether the operating user has the right to access the cloud desktop, effectively avoiding user accounts On the other hand, when the user authentication information of the USB-Key is verified, the dynamic password is sent to the preset password receiving device to further verify the identity of the operating user through the dynamic password. The method greatly improves the security of cloud desktop access authentication.

It can be further understood that, in the foregoing embodiments, the description of each embodiment has its own emphasis, and for parts that are not described or described in detail in a certain embodiment, reference may be made to related descriptions of other embodiments.

FIG. 6 shows an electronic device 600 provided by an embodiment of the present application. As shown in FIG. 6 , the electronic device 600 includes but is not limited to:

a memory 601 for storing programs;

The processor 602 is configured to execute the program stored in the memory 601. When the processor 602 executes the program stored in the memory 601, the processor 602 is configured to execute the above-mentioned cloud desktop access authentication method.

The processor 602 and the memory 601 may be connected by a bus or otherwise.

As a non-transitory computer-readable storage medium, the memory 601 can be used to store non-transitory software programs and non-transitory computer-executable programs, such as the cloud desktop access authentication method described in any embodiment of this application. The processor 602 implements the above-mentioned cloud desktop access authentication method by running the non-transitory software programs and instructions stored in the memory 601 .

The memory 601 may include a stored program area and a stored data area, wherein the stored program area may store an operating system and an application program required by at least one function; the storage data area may store and execute the above-mentioned cloud desktop access authentication method. Additionally, memory 601 may include high-speed random access memory, and may also include non-transitory memory, such as at least one magnetic disk storage device, flash memory device, or other non-transitory solid-state storage device. In some embodiments, memory 601 may include memory located remotely from processor 602, which may be connected to processor 602 through a network. Examples of such networks include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

The non-transitory software programs and instructions required to implement the above-mentioned cloud desktop access authentication method are stored in the memory 601, and when executed by one or more processors 602, execute the cloud desktop access authentication method provided by any embodiment of the present application.

Embodiments of the present application further provide a storage medium storing computer-executable instructions, where the computer-executable instructions are used to execute the above-mentioned cloud desktop access authentication method.

In one embodiment, the storage medium stores computer-executable instructions, and the computer-executable instructions are executed by one or more control processors 602, for example, by a processor 602 in the electronic device 600 described above, so that the above One or more processors 602 execute the cloud desktop access authentication method provided by any embodiment of the present application.

The embodiments of the present application include: receiving a cloud desktop access request from a client terminal, where the cloud desktop access request carries user authentication information obtained by the client terminal from a USB-Key; generating a first dynamic password according to the cloud desktop access request, Send the user authentication information and the first dynamic password to the cloud service terminal, so that the cloud service terminal verifies the user authentication information and saves the first dynamic password; receives the cloud service terminal The verification information sent according to the user authentication information; if the verification information indicates that the verification of the user authentication information is passed, the first dynamic password is sent to a preset password receiving device, so that the client terminal The permission to access the cloud desktop is acquired from the cloud service terminal according to the first dynamic password received by the preset password receiving device. The solution of the embodiment of the present application, on the one hand, verifies the identity of the operating user currently operating the client based on the highly secure USB-Key user authentication information, and then determines whether the operating user has the right to access the cloud desktop, effectively avoiding user accounts On the other hand, when the user authentication information of the USB-Key is verified, the dynamic password is sent to the preset password receiving device to further verify the identity of the operating user through the dynamic password. The method greatly improves the security of cloud desktop access authentication.

The above-described embodiments are only illustrative, and the units described as separate components may or may not be physically separated, that is, may be located in one place, or may be distributed to multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the solution in this embodiment.

Those of ordinary skill in the art can understand that all or some of the steps and systems in the methods disclosed above can be implemented as software, firmware, hardware, and appropriate combinations thereof. Some or all physical components may be implemented as software executed by a processor, such as a central processing unit, digital signal processor or microprocessor, or as hardware, or as an integrated circuit, such as an application specific integrated circuit . Such software may be distributed on computer-readable media, which may include computer storage media (or non-transitory media) and communication media (or transitory media). As known to those of ordinary skill in the art, the term computer storage media includes both volatile and nonvolatile implemented in any method or technology for storage of information, such as computer readable instructions, data structures, program modules or other data flexible, removable and non-removable media. Computer storage media include, but are not limited to, RAM, ROM, EEPROM, flash memory or other memory technology, CD-ROM, digital versatile disk (DVD) or other optical disk storage, magnetic cartridges, magnetic tape, magnetic disk storage or other magnetic storage devices, or may Any other medium used to store desired information and which can be accessed by a computer. In addition, communication media typically include computer readable instructions, data structures, program modules, or other data in a modulated data signal such as a carrier wave or other transport mechanism, and can include any information delivery media, as is well known to those of ordinary skill in the art .

The above is a specific description of some implementations of the present application, but the present application is not limited to the above-mentioned embodiments, and those skilled in the art will not violate the spirit of the present application. Various equivalent modifications or substitutions can also be made under the shared conditions, and these equivalent modifications or substitutions are all included within the scope defined by the claims of the present application.

Claims

A cloud desktop access authentication method, applied to an authentication auxiliary terminal, the method comprising:

receiving a cloud desktop access request from a client terminal, where the cloud desktop access request carries the user authentication information obtained by the client terminal from the USB-Key;

Generate a first dynamic password according to the cloud desktop access request, and send the user authentication information and the first dynamic password to the cloud service terminal, so that the cloud service terminal verifies and saves the user authentication information the first dynamic password;

receiving the verification information sent by the cloud service terminal according to the user authentication information;

In the case that the verification information indicates that the verification of the user authentication information is passed, the first dynamic password is sent to a preset password receiving device, so that the client terminal receives the password according to the preset password receiving device. The first dynamic password obtains the permission to access the cloud desktop from the cloud service terminal.
The method of claim 1, further comprising:

Receive the user name and the access password sent by the client terminal, and match the user name and the access password;

In the case that the user name and the access password match, the first dynamic password is generated according to the cloud desktop access request.
The method according to claim 1, further comprising: when the first dynamic password is sent to the client terminal, logging out the first dynamic password.
The method of claim 1, wherein the user authentication information includes a user identification code stored in the USB-Key.
A cloud desktop access authentication method, applied to a cloud service terminal, the method comprising:

receiving the user authentication information and the first dynamic password sent by the authentication assistant terminal;

Verifying the user authentication information, and sending verification information indicating that the user authentication information has passed the verification to the authentication assistant terminal in the case that the user authentication information is verified successfully;

save the first dynamic password;

Receive the second dynamic password sent by the client terminal, and match the second dynamic password sent by the client terminal with the stored first dynamic password, and when the second dynamic password sent by the client terminal matches the stored first dynamic password The first dynamic password of the client terminal is matched, and the client terminal is granted the permission to access the cloud desktop.
A cloud desktop access authentication method is applied to a client terminal, wherein the client terminal is connected with a USB-Key, and the method includes:

Obtain user authentication information from the USB-Key;

sending a cloud desktop access request to the authentication assistant terminal, wherein the cloud desktop access request carries the user authentication information;

According to the first dynamic password sent by the authentication assistant terminal and received by the preset password receiving device, the second dynamic password is sent to the cloud service terminal, so as to obtain the permission to access the cloud desktop from the cloud service terminal.
The cloud desktop access authentication method according to claim 6, further comprising:

Obtain the user name and access password input by the user, and send the user name and the access password to the authentication auxiliary terminal, so that the authentication auxiliary terminal can perform the authentication according to the The cloud desktop access request generates the first dynamic password.
The cloud desktop access authentication method according to claim 6, wherein the user authentication information includes a user identification code stored in the USB-Key.
An electronic device, comprising: a memory, a processor and a computer program stored on the memory and executable on the processor, wherein the processor implements any one of claims 1 to 8 when the processor executes the computer program the method described.
A computer-readable storage medium storing computer-executable instructions for performing the method of any one of claims 1 to 8.