| 摘要 |
FIELD: physics, computer engineering.SUBSTANCE: invention relates to computer resource security management. A computer-implemented method of controlling access to computer resources of a provider, wherein one or more computer resources of a computer resource provider are a part of a logical group of computer resources in a key zone from a plurality of key zones, the method comprising: receiving, from the main key source, a session key corresponding to a key zone, wherein the session key is generated at least by applying a hash function of a message authentication code to a secret certificate and the first set of one or more session parameters; receiving an electronic request to access one or more computer resources and a signature for the electronic request, which was generated based, at least in a part, on the secret certificate and the second set of one or more session parameters; generating, using one or more computer systems, a source signature at least by applying a hash function of a message authentication code to at least the electronic request and the received session key; and providing access to one or more computer resources.EFFECT: efficient management of computer resource security.27 cl, 24 dwg |
