AUTHENTICATION OF NETWORK NODES

摘要

Various embodiments of systems and methods of network nodes authentication are described herein. In one aspect, a provisioning of an application in a specified computing environment is requested, where the application is operable of providing at least one kind of services to online clients. One or more servers are instantiated to deploy the application, where at least one of the servers may be a virtual machine. A globally unique identifier (GUID) for the application is generated and embedded in a security certificate associated with the deployed application. A correspondence between the GUID and the network address or the host name of the server is stored. In another aspect, a server request is forwarded for processing by the application or canceled based on a comparison between the network address or the host name of the server deploying the application, and the network address or the host name corresponding to the GUID.

主权项

1. A computer-readable non-transitory medium storing instructions which, when executed by at least one processor, cause a computer system to perform activities comprising:
upon receiving an online service request, establish a connection to a server hosting an application operable to provide the requested service; obtain a security certificate assigned to the application hosted on the server; extract a global unique identifier (GUID) of the application from a security certificate associated with the application; identify one or more of a network address and a host name corresponding to the GUID of the application; and based on a comparison between the identified network address or the host name corresponding to the GUID of the application and a network address or a host name associated with the server hosting the application, allow access to the application for processing the service request or reject the service request.