混合云服务中的跨云际认证机制

随着云计算的蓬勃发展，越来越多的企业和个人将他们的存储和计算需求付诸于云端，但由于安全问题得不到有效解决限制了企业跨云际数据访问的应用和发展。提出了一种基于 Kerberos 的混合云服务中跨云际认证的机制，在这种机制中，云终端采取基于身份认证的方式直接和私有云进行认证，凭借企业私有云发放的票据访问企业存放在公有云中的数据。该机制具有不需要管理和发放证书、密钥管理简单、易于存取控制等优点；模拟实现了这种认证系统，为跨云际访问数据的身份认证和访问控制奠定了安全基础。

Authentication Mechanism of Crossing Clouds in Hybrid Cloud Services

With the rapid development of cloud computing, more and more businesses and individuals put there storage and computing needs into clouds. But as people have no more effective solutions for the security problems, the use and development are limited when getting data across the clouds. In this paper, we present a Kerberos-based authentication mechanism of crossing the clouds in hybrid cloud services. In this mechanism the Cloudterminal get to the certification with the Private-clouds directly. Issued by the tickets of enterprise Private-clouds Cloudterminal can get the access to the data in the Public clouds in a way based on authentication. In this mechanism there's no need to manage and issue certificates and the key management is simple and easy to control. This paper achieved this certification system, laid the foundation for secure authentication and access controlling when getting data across clouds.