A cloud security management platform is designed, including the cloud server and the cloud client. Biological information of clients is collected and handled as the basis for identity authentication which achieves certainty, anti-forgery and non-repudiation. The problem of confidentiality of key in data encryption and decryption is resolved by biological random key through mathematical transformation. Cloud server customizes different access strategies for different kinds of users to ensure legitimate users access and prevent unauthorized access. The security of cloud services is improved to a certain extent.%设计了一个云安全管理平台,包括服务端和客户端.客户端采集并处理用户生物学信息作为身份识别的依据,实现了身份认证的确定性、防篡改和不可抵赖性；数学转换得到的生物随机密钥,解决了数据加密/解密时密钥的隐秘问题.服务端为不同类别的用户定制不同访问策略,确保合法用户的访问,防止非授权访问.云服务的安全性得到一定程度的提升.
展开▼
