# US 2023/0065801 A1 · Data center 5g network encrypted multicast-based authority authentication method and system > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2023/0065801 A1 - Document ID: US20230065801A1 - Status: Published application - Kind: A1 - Application number: 17/796,015 - Filed: 2021-02-19 - Published: 2023-03-02 - Earliest claimed: 2020-06-14 - Assignees: Inspur Suzhou Intelligent Technology Co., Ltd. - Applicants: Inspur Suzhou Intelligent Technology Co., Ltd. - Inventors: Xin ZHANG; Xiaotong WANG; Wanxian HE - Web page: https://patentgrep.com/patent/US20230065801A1 ## CPC - H04W 12/041: Key generation or derivation - H04W 12/068: {using credential vaults, e.g. password manager applications or one time password [OTP] applications} - H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)} - H04L 63/101: {Access control lists [ACL]} - H04W 12/033: of the user plane, e.g. user's traffic - H04W 12/10: Integrity - H04L 2463/062: applying encryption of the keys - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A data center 5th-Generation (5G) network encrypted multicast-based authority authentication method, system, and device, and a medium. In the present disclosure, authority authentication and data connection are performed on each platform of a data center by 5G network encrypted multicast, and a network encrypted multicast component is configured on the platform of the data center. An encrypted multicast packet is sent to a network by the platform. Connection is completed by handshaking and mutual heartbeat transmission between the platforms. Authority verification is performed through the multicast packet. In this manner, the problem of security risk of traditional authority authentication may be reduced, and the intercommunication speed and efficiency of each platform of the data center may be improved greatly. ## Claims ### Claim 1 A data center 5th-Generation (5G) network encrypted multicast-based authority authentication method, comprising: configuring, by platforms of the data center in a 5G network, a network encrypted multicast component, and configuring a user name and a password; converting, by a platform authentication and access management server, the user name and password of the platform into information matrices, and matching the information matrices to verify the user name and the password; configuring a network encrypted multicast key to encrypt a multicast packet sent to the network by the platforms; the platforms discovering each other through encrypted multicast packets, handshaking, and storing Internet Protocol (IP) addresses and service types of each other locally; after handshaking, interconnecting, by sending heartbeat, the platforms, encrypting a packet by date for targeted sending, and decrypting, by each platform, the packet based on local time after receiving the packet; verifying a platform authority through the multicast packet. ### Claim 2 (depends on 1) The data center 5G network encrypted multicast-based authority authentication method according to claim 1, wherein the multicast packet comprises a local IP address, a local service type, a local unique identifier, a ciphertext, and a Media Access Control (MAC) address. ### Claim 3 (depends on 1) The data center 5G network encrypted multicast-based authority authentication method according to claim 1, wherein the network encrypted multicast component has a unique identifier. ### Claim 4 (depends on 1) The data center 5G network encrypted multicast-based authority authentication method according to claim 1, wherein the verifying a platform authority comprises: A: in response to determining that a global IP white list is hit, determining that verification succeeds, and performing step D, and in response to determining that the global IP white list is not hit, performing step B; B: in response to determining that a user IP white list is hit, determining that verification succeeds, and performing step D, and in response to determining that the user IP white list is not hit, performing step C; C: verifying a ciphertext, in response to verification of the ciphertext failing, throwing an exception, and in response to verification of the ciphertext succeeding, performing step D; and D: verifying an authority required by a request of a user and an authority of the user, and in response to verification of the authority required by the request of the user and the authority of the user failing, throwing an exception. ### Claim at position 5 -7. (canceled) ### Claim 8 A data center 5th-Generation (5G) network encrypted multicast-based authority authentication device, comprising: a memory, configured to store a computer program; and a processor, configured to execute the computer program so as to implement a data center 5G network encrypted multicast-based authority authentication method, wherein the data center 5G network encrypted multicast-based authority authentication method comprises the following operations: configuring, by platforms of the data center in a 5G network, a network encrypted multicast component, and configuring a user name and a password; converting, by a platform authentication and access management server, the user name and password of the platform into information matrices, and matching the information matrices to verify the user name and the password; configuring a network encrypted multicast key to encrypt a multicast packet sent to the network by the platforms; the platforms discovering each other through encrypted multicast packets, handshaking, and storing Internet Protocol (IP) addresses and service types of each other locally; after handshaking, interconnecting, by sending heartbeat, the platforms, encrypting a packet by date for targeted sending, and decrypting, by each platform, the packet based on local time after receiving the packet; and verifying a platform authority through the multicast packet. ### Claim 9 A readable storage medium, having a computer program stored thereon which, when executed by a processor, implements a data center 5G network encrypted multicast-based authority authentication method, wherein the data center 5G network encrypted multicast-based authority authentication method comprises the following operations: configuring, by platforms of the data center in a 5G network, a network encrypted multicast component, and configuring a user name and a password; converting, by a platform authentication and access management server, the user name and password of the platform into information matrices, and matching the information matrices to verify the user name and the password; configuring a network encrypted multicast key to encrypt a multicast packet sent to the network by the platforms; the platforms discovering each other through encrypted multicast packets, handshaking, and storing Internet Protocol (IP) addresses and service types of each other locally; after handshaking, interconnecting, by sending heartbeat, the platforms, encrypting a packet by date for targeted sending, and decrypting, by each platform, the packet based on local time after receiving the packet; and verifying a platform authority through the multicast packet. ### Claim 10 (depends on 1) The data center 5G network encrypted multicast-based authority authentication method according to claim 1, wherein the network encrypted multicast component is configured with a supreme administrator authority and dedicated encrypted code for local login. ### Claim 11 (depends on 10) The data center 5G network encrypted multicast-based authority authentication method according to claim 10, wherein the network encrypted multicast component is further configured to send a specific encrypted multicast to a whole network according to a configuration item. ### Claim 12 (depends on 1) The data center 5G network encrypted multicast-based authority authentication method according to claim 1, wherein the network encrypted multicast key of each of the platforms is the same. ### Claim 13 (depends on 8) The data center 5G network encrypted multicast-based authority authentication device according to claim 8, wherein the multicast packet comprises a local IP address, a local service type, a local unique identifier, a ciphertext, and a Media Access Control (MAC) address. ### Claim 14 (depends on 8) The data center 5G network encrypted multicast-based authority authentication device according to claim 8, wherein the network encrypted multicast component has a unique identifier. ### Claim 15 (depends on 8) The data center 5G network encrypted multicast-based authority authentication device according to claim 8, wherein the verifying a platform authority comprises: A: in response to determining that a global IP white list is hit, determining that verification succeeds, and performing step D, and in response to determining that the global IP white list is not hit, performing step B; B: in response to determining that a user IP white list is hit, determining that verification succeeds, and performing step D, and in response to determining that the user IP white list is not hit, performing step C; C: verifying a ciphertext, in response to verification of the ciphertext failing, throwing an exception, and in response to verification of the ciphertext succeeding, performing step D; and D: verifying an authority required by a request of a user and an authority of the user, and in response to verification of the authority required by the request of the user and the authority of the user failing, throwing an exception. ### Claim 16 (depends on 8) The data center 5G network encrypted multicast-based authority authentication device according to claim 8, wherein the network encrypted multicast component is configured with a supreme administrator authority and dedicated encrypted code for local login. ### Claim 17 (depends on 16) The data center 5G network encrypted multicast-based authority authentication device according to claim 16, wherein the network encrypted multicast component is further configured to send a specific encrypted multicast to a whole network according to a configuration item. ### Claim 18 (depends on 8) The data center 5G network encrypted multicast-based authority authentication device according to claim 8, wherein the network encrypted multicast key of each of the platforms is the same. ### Claim 19 (depends on 9) The readable storage medium according to claim 9, wherein the multicast packet comprises a local IP address, a local service type, a local unique identifier, a ciphertext, and a Media Access Control (MAC) address. ### Claim 20 (depends on 9) The readable storage medium according to claim 9, wherein the network encrypted multicast component has a unique identifier. ### Claim 21 (depends on 9) The readable storage medium according to claim 9, wherein the verifying a platform authority comprises: A: in response to determining that a global IP white list is hit, determining that verification succeeds, and performing step D, and in response to determining that the global IP white list is not hit, performing step B; B: in response to determining that a user IP white list is hit, determining that verification succeeds, and performing step D, and in response to determining that the user IP white list is not hit, performing step C; C: verifying a ciphertext, in response to verification of the ciphertext failing, throwing an exception, and in response to verification of the ciphertext succeeding, performing step D; and D: verifying an authority required by a request of a user and an authority of the user, and in response to verification of the authority required by the request of the user and the authority of the user failing, throwing an exception. ### Claim 22 (depends on 9) The readable storage medium according to claim 9, wherein the network encrypted multicast component is configured with a supreme administrator authority and dedicated encrypted code for local login. ### Claim 23 (depends on 22) The readable storage medium according to claim 22, wherein the network encrypted multicast component is further configured to send a specific encrypted multicast to a whole network according to a configuration item.