The Design And Test Of Desktop Cloud Authentication System

With the rapid development and promotion of cloud computing technology,more and more enterprises and units began to use desktop cloud technology to improve the efficiency of enterprise management.Cloud desktop authentication technology is an important security for desktop cloud system,which using a variety of ways for identify,refusing unauthorized users to access,so that ensure the system security and protect user’s information.Compared to the traditional IT field,the desktop cloud environment is more complicated for user authentication,and presents new challenges.So how to improve the security of desktop cloud certification system,has become a research hotspot in recent years.This paper focused on the subject of desktop cloud user authentication,combined with the international pioneer of the desktop cloud security field:the red hat Ovirt private cloud management platform.We analyzed the mechanism of user authentication part,and made a number of security vulnerabilities,then in-depth analyzed the feasibility multiple authentication technologies in its environment using the traditional authentication methods.This paper carried out the following work :(1)We tudied the existing user authentication technology and related cryptography works.We analyzed the mechanisms and processes of user password authentication and USB-Key authentication.Combined with the characteristics of the cloud desktop application,we improved the Diffle-Hellman key agreement protocol and the HMAC-MD5 algorithm to make it more in line with the desktop cloud certification requirements.(2)We studied the Ovirt platform to analyze the process and the potential security risks of its user authentication,and by studying the authentication access method and virtual machine credentials management mechanism we proposed one user authentication scheme which is more secure for the Ovirt platform.(3)Based on the theory above,we designd and implemented the two-factor user authentication system for cloud desktop using password and USB-Key.Combined with Ovirt platform,we actual use this designed certification system in our laboratory.By practical using,we certified that this authentication system can eliminate platform security risks,and improve the security of system.(4)By studing on the theory of software testing and analysis of the certification system,we designed and implementated the test platform for this authentication system.System was tested on the test platform,especially tested its running conditions under high load stability,so that to prove the feasibility of large-scale scene.