公开(公告)号：US09137226B2

公开(公告)日：2015-09-15

申请号：US13643958

申请日：2011-04-27

申请人： Hongru Zhu ,  Minpeng Qi ,  Wenjuan Jiao

发明人： Hongru Zhu ,  Minpeng Qi ,  Wenjuan Jiao

IPC分类号： H04L9/32 ,  H04L29/06 ,  H04W12/06 ,  H04L9/08 ,  H04W4/00

CPC分类号： H04L63/065 ,  H04L9/0833 ,  H04L9/085 ,  H04L63/0884 ,  H04W4/70 ,  H04W12/06

摘要： An authentication method and device, authentication centre and system are provided. The method comprises: receiving at least one access request and obtaining sub-key information from the access request; generating a group key according to the obtained sub-key information, and interacting with the network side according to the group key to perform the group authentication. The solution can solve the problem that the one-to-one authentication causes network load in the present art, implement the authentication of multiple nodes at one time, reduce network resources and the network load of the server, and can be appropriate for the authentication of the terminal nodes in the internet of things, and can greatly improve the availability of services in the internet of things.

摘要翻译： 提供了认证方法和设备，认证中心和系统。 该方法包括：从接入请求中接收至少一个接入请求并获得子密钥信息; 根据所获得的子密钥信息生成组密钥，并根据组密钥与网络侧进行交互，进行组认证。 该解决方案可以解决现有技术中一对一认证导致网络负载的问题，同时实现多个节点的认证，减少网络资源和服务器的网络负载，适合认证 的互联网终端节点，可以大大提高物联网服务的可用性。

公开(公告)号：US20130046983A1

公开(公告)日：2013-02-21

申请号：US13643958

申请日：2011-04-27

申请人： Hongru Zhu ,  Minpeng Qi ,  Wenjuan Jiao

发明人： Hongru Zhu ,  Minpeng Qi ,  Wenjuan Jiao

IPC分类号： H04L9/32

CPC分类号： H04L63/065 ,  H04L9/0833 ,  H04L9/085 ,  H04L63/0884 ,  H04W4/70 ,  H04W12/06

摘要： An authentication method and device, authentication centre and system are provided. The method comprises: receiving at least one access request and obtaining sub-key information from the access request; generating a group key according to the obtained sub-key information, and interacting with the network side according to the group key to perform the group authentication. The solution can solve the problem that the one-to-one authentication causes network load in the present art, implement the authentication of multiple nodes at one time, reduce network resources and the network load of the server, and can be appropriate for the authentication of the terminal nodes in the internet of things, and can greatly improve the availability of services in the internet of things.

摘要翻译： 提供了认证方法和设备，认证中心和系统。 该方法包括：从接入请求中接收至少一个接入请求并获得子密钥信息; 根据获得的子密钥信息生成组密钥，并根据组密钥与网络侧进行交互，进行组认证。 该解决方案可以解决现有技术中一对一认证导致网络负载的问题，同时实现多个节点的认证，减少网络资源和服务器的网络负载，适合认证 的互联网终端节点，可以大大提高物联网服务的可用性。

公开(公告)号：US20120204226A1

公开(公告)日：2012-08-09

申请号：US13392983

申请日：2010-08-17

申请人： Minpeng Qi ,  Hongru Zhu ,  Qi Wu

发明人： Minpeng Qi ,  Hongru Zhu ,  Qi Wu

IPC分类号： G06F21/00

CPC分类号： H04W12/06 ,  H04L45/12

摘要： A method, Super Node-Core (SN-C) node and Distributed Service Network (DSN) authentication system for requesting and storing DSN authentication information are provided, wherein the method for requesting the DSN authentication information includes: according to a user access request, judging whether a local SN-C node stores the authentication information of the user; when the local SN-C node stores the authentication information, initiating an authentication process directly; when the local SN-C node does not store the authentication information, requesting the authentication information from other SN-C nodes which store the authentication information of the user. The method, SN-C node and DSN authentication system for requesting and storing the DSN authentication information, by means of the distributed storage and authentication of the authentication information of the user, can acquire the authentication information from other SN-C nodes when a failure occurs in one of the SN-C nodes, and reduce the risk that a single authentication server is unable to perform the authentication and operation caused by the failure.

摘要翻译： 提供了一种用于请求和存储DSN认证信息的方法，超级节点核心（SN-C）节点和分布式业务网络（DSN）认证系统，其中用于请求DSN认证信息的方法包括：根据用户接入请求， 判断本地SN-C节点是否存储用户的认证信息; 当本地SN-C节点存储认证信息时，直接启动认证过程; 当本地SN-C节点不存储认证信息时，从存储用户认证信息的其他SN-C节点请求认证信息。 用于请求和存储DSN认证信息的方法，SN-C节点和DSN认证系统，通过对用户认证信息的分布式存储和认证，可以在发生故障时从其他SN-C节点获取认证信息 发生在其中一个SN-C节点，并降低单个认证服务器无法执行由故障引起的认证和操作的风险。

公开(公告)号：US08763083B2

公开(公告)日：2014-06-24

申请号：US13392983

申请日：2010-08-17

申请人： Minpeng Qi ,  Hongru Zhu ,  Qi Wu

发明人： Minpeng Qi ,  Hongru Zhu ,  Qi Wu

IPC分类号： G06F21/00

CPC分类号： H04W12/06 ,  H04L45/12

摘要： A method, Super Node-Core (SN-C) node and Distributed Service Network (DSN) authentication system for requesting and storing DSN authentication information are provided, wherein the method for requesting the DSN authentication information includes: according to a user access request, judging whether a local SN-C node stores the authentication information of the user; when the local SN-C node stores the authentication information, initiating an authentication process directly; when the local SN-C node does not store the authentication information, requesting the authentication information from other SN-C nodes which store the authentication information of the user. The method, SN-C node and DSN authentication system for requesting and storing the DSN authentication information, by means of the distributed storage and authentication of the authentication information of the user, can acquire the authentication information from other SN-C nodes when a failure occurs in one of the SN-C nodes, and reduce the risk that a single authentication server is unable to perform the authentication and operation caused by the failure.

摘要翻译： 提供了一种用于请求和存储DSN认证信息的方法，超级节点核心（SN-C）节点和分布式业务网络（DSN）认证系统，其中用于请求DSN认证信息的方法包括：根据用户接入请求， 判断本地SN-C节点是否存储用户的认证信息; 当本地SN-C节点存储认证信息时，直接启动认证过程; 当本地SN-C节点不存储认证信息时，从存储用户认证信息的其他SN-C节点请求认证信息。 用于请求和存储DSN认证信息的方法，SN-C节点和DSN认证系统，通过对用户认证信息的分布式存储和认证，可以在发生故障时从其他SN-C节点获取认证信息 发生在其中一个SN-C节点，并降低单个认证服务器无法执行由故障引起的认证和操作的风险。

公开(公告)号：US10375064B2

公开(公告)日：2019-08-06

申请号：US15564177

申请日：2016-03-21

申请人： Alibaba Group Holding Limited ,  Qiang Fang ,  Hongru Zhu ,  Qing An ,  Yingfang Fu

发明人： Qiang Fang ,  Hongru Zhu ,  Qing An ,  Yingfang Fu

IPC分类号： H04L29/06 ,  G06F21/12 ,  G06F21/33 ,  H04L29/08

摘要： Disclosed herein are methods, apparatuses, and systems for remotely accessing cloud applications. In one embodiment, the method comprises receiving an access request of a requester, sent by a cloud server, requesting being accessed by a controlling party; establishing a secure channel with the cloud server based on the access request of the requester, sent by the cloud server, requesting being accessed by the controlling party; receiving, via the safety channel, a login key generated based on the access request of the requester sent by the cloud server; generating, based on the login key, a login request for logging into the requester and sending the login request to the cloud server; receiving mode information of a login success returned by the cloud server after the cloud server verifies the login request; and receiving current mode information of the requester pushed by the cloud server, and entering a remote access mode for the requester. The disclosed embodiments can solve the following problems: remote access is not possible between different operating systems; a request for remote access cannot be made between terminals; and wasting unnecessary resources on site traffic. In addition, the method also prevents the risk of password leakage during remote access.