Security management platform based on authentication and access control Abstract: Cloud computing infrastructure has deployed a cloud security management platform, including servers and clients. The client collects and processes the user's biological information as the basis of identity identification, realizing the certainty, tampering and non-repudiation of authentication; From the mathematical transformation of biological random key, the problem of data encryption/decryption key hiding is solved. The server customizes different access policies for different types of users to ensure the access of legal users and prevent unauthorized access. Cloud security has been improved to some extent. Keywords: cloud security management platform; Identity authentication; Access control; Soap; Random key