Method for license authentication, and node, system and computer-readable storage medium for the same
According to embodiments of the present disclosure, there is provided an edge authentication node, a central authentication node, a method implemented in each node, a system including each node, and a corresponding computer-readable storage medium for license authentication. The method implemented in the edge authentication node includes: receiving a license authentication request from a client node, the license authentication request includes client fingerprint information associated with the client node; decrypting, based on the client fingerprint information, a license certificate associated with the client node generated by the central authentication node, so as to obtain license information associated with the client node; and transmitting a license authentication response to the client node based at least partially on the license information obtained.
1. A method implemented in an edge authentication node for license authentication, comprising:
receiving a license authentication request from a client node, the license authentication request comprises client fingerprint information associated with the client node;
decrypting, based on the client fingerprint information, a license certificate associated with the client node generated by a central authentication node, so as to obtain license information associated with the client node;
transmitting a license authentication response to the client node based at least partially on the license information obtained; and
subsequent to the decrypting, based on the client fingerprint information, a license certificate associated with the client node generated by a central authentication node,
extracting client public key information from the client fingerprint information;
authenticating the license certificate by using the client public key information; and
extracting license information in the license certificate, in response to the license certificate being authenticated successfully.
2. The method according to claim 1 , wherein the decrypting, based on the client fingerprint information, a license certificate associated with the client node generated by a central authentication node comprises:
determining a decryption key for the client node based on the client fingerprint information; and
decrypting the license certificate by using the decryption key.
3. The method according to claim 1 , wherein the authenticating the license certificate by using the client public key information comprises authenticating at least one of:
whether a digital signature of the license certificate is legal or not;
whether an issuing authority of the license certificate is a legal issuing authority or not; and
whether a validity period of the license certificate has not expired.
4. The method according to claim 1 , wherein the extracting license information in the license certificate comprises extracting at least one of an issuing authority, an authorization type, an authorization quantity, an authorization object, and authorization product information in the license certificate.
5. The method according to claim 1 , wherein the transmitting a license authentication response to the client node based at least partially on the license information obtained comprises:
transmitting the license authentication response to the client node based at least partially on the license information extracted, so as to permit the client node to perform a configuration based on the license information.
6. The method according to claim 1 , further comprising: subsequent to the receiving a license authentication request from the client node,
forwarding the license authentication request to the central authentication node; and
receiving a central license authentication response in response to the license authentication request from the central authentication node,
wherein the transmitting a license authentication response to the client node based at least partially on the license information obtained comprises:
transmitting the license authentication response to the client node based on the license information obtained and the central license authentication response received from the central authentication node.
7. The method according to claim 1 , wherein the license certificate is generated according to a JWT protocol.
8. The method according to claim 1 , further comprising:
recording, at the edge authentication node, log data of a license authentication session related to the license authentication request, in response to the license authentication request being received from the client node.
9. The method according to claim 1 , wherein the client fingerprint information is identity authentication information for uniquely identifying and authenticating the client node.
10. The method according to claim 1 , further comprising:
collecting information about at least one of the edge authentication node, the client node, or the license certificate; and
uploading the collected information to the central authentication node.
11. An edge authentication node for license authentication, comprising:
a processor;
a memory having instructions stored thereon that, when executed by the processor, cause the processor to perform a method comprising:
receiving a license authentication request from a client node, the license authentication request comprises client fingerprint information associated with the client node;
decrypting, based on the client fingerprint information, a license certificate associated with the client node generated by a central authentication node, so as to obtain license information associated with the client node;
transmitting a license authentication response to the client node based at least partially on the license information obtained; and
subsequent to the decrypting, based on the client fingerprint information, a license certificate associated with the client node generated by a central authentication node,
extracting client public key information from the client fingerprint information;
authenticating the license certificate by using the client public key information; and
extracting license information in the license certificate, in response to the license certificate being authenticated successfully.
12. A system for license authentication, comprising:
a central authentication node;
a edge authentication node; and
one or more client nodes;
wherein the central authentication node for license authentication comprises: a processor; and a memory having instructions stored thereon that, when executed by the processor, cause the processor to perform a method comprising:
receiving a license certificate generation request for generating a license certificate associated with the client node;
generating the license certificate associated with the client node based on request information included in the license certificate generation request; and
providing the license certificate to an edge authentication node associated with the client node, for subsequent authentication for the edge authentication node;
wherein the edge authentication node for license authentication, comprises: a processor; a memory having instructions stored thereon that, when executed by the processor, cause the processor to perform a method implemented in an edge authentication node for license authentication comprising:
receiving a license authentication request from a client node, the license authentication request comprises client fingerprint information associated with the client node;
decrypting, based on the client fingerprint information, a license certificate associated with the client node generated by a central authentication node, so as to obtain license information associated with the client node;
transmitting a license authentication response to the client node based at least partially on the license information obtained; and
subsequent to the decrypting, based on the client fingerprint information, a license certificate associated with the client node generated by a central authentication node,
extracting client public key information from the client fingerprint information;
authenticating the license certificate by using the client public key information; and
extracting license information in the license certificate, in response to the license certificate being authenticated successfully.
13. A non-transitory computer-readable storage medium for storing instructions that, when executed by one or more processors, cause the one or more processors to perform a method comprising:
receiving a license authentication request from a client node, the license authentication request comprises client fingerprint information associated with the client node;
decrypting, based on the client fingerprint information, a license certificate associated with the client node generated by a central authentication node, so as to obtain license information associated with the client node; and
transmitting a license authentication response to the client node based at least partially on the license information obtained; and
subsequent to the decrypting, based on the client fingerprint information, a license certificate associated with the client node generated by a central authentication node,
extracting client public key information from the client fingerprint information;
authenticating the license certificate by using the client public key information; and
extracting license information in the license certificate, in response to the license certificate being authenticated successfully.