33results about How to "Precise access control" patented technology

The invention relates to the technical field of terminal admission control, and particularly discloses a terminal admission control method based on switch port management. The method includes the steps that after a new terminal gets access to a network, the new terminal is collected through a switch, the unique identification of the terminal is extracted, and the terminal is interrelated with a port of the switch; the unique identification is compared with MAC addresses of an admission database and judged; if the unique identification is inquired, the new terminal is a legal terminal, and no action is generated; if the unique identification is not inquired, the new terminal is an illegal terminal or an external terminal, the corresponding port of the switch is closed immediately, and close information is recorded in the admission database; when a new terminal gets access to the network again, the new terminal is joined after window period processing; the previous steps are executed again to start processing; if no new terminal gets access to the network, the closed port of the switch is automatically opened after appointed time. MAC address management is adopted for the terminals, a terminal user is forbidden to change an MAC address without authorization, a virtual machine is managed, HUB access is stopped, and terminal admission control is accurate and strict.

An Extensible Markup Language (XML) document management method includes: receiving an XML document management operation request sent via an XCAP protocol, by an XML Document Management Server (XDMS); determining that the XML document management operation request is in an entrustment mode, and determining whether to perform an operation described in the XML document management operation request in accordance with access permission information corresponding to an XML document, by the XDMS.

The invention discloses an Internet of ships intelligent shore-based interaction device based on Beidou, and the device comprises an embedded-type main control board, an extended control board, a communication/positioning module, an AIS module, a ZigBee module, a sensor module, an RFID module, an internal control module, an encryption module, a power module, an external control module, a fingerprint recognition module, a DVR module, a multimedia module, a storage unit, an intelligent terminal system, a liquid crystal touch screen, and an interface module. The embedded-type main control board is connected with the extended control board. The power module is connected with the main control board and the extended control board. The communication/positioning module achieves interaction with shore-based equipment through a Beidou message or a 3G/GPRS signal. The device employs the technology of multimode positioning, the technology of sensing, the technology of wireless networking communication and the technology of safety encryption, achieves a function of inland river gate report, a function of visualized emergency command scheduling and a function of shipping electronic business, and prompts the building and development of inland river Internet of ships.

The invention provides a user access control method and device, and a router. The control method is used for the router which is used for providing network access serve for users through a wireless communication network. The method comprises the following steps: determining the network quality information of a first wireless communication network accessed into the router; obtaining the actual data transmission ability of the router according to the network quality information; calculating the current number of subscribers supported by the router according to the actual data transmission ability; and controlling user access according to the number of subscribers. According to the invention, the flexibility of the access control of the router is improved.

The embodiment of the invention provides an access control method, equipment and system and a storage medium. A configuration server in the system is used for determining a file type to which each file of a data party in a business system belongs, and generating authentication information for each file aiming at different access roles according to access permissions of different access roles underthe file type to which each file belongs, outputting the authentication information of each file for different access roles to a service system; the service system is used for receiving a file accessrequest of a user, the file access request is used for requesting to access a target file, and carrying authentication information corresponding to the target file acquired according to an access role of the user in the authentication request and sending to the authentication server; and the authentication server is used for generating an authentication result according to the authentication information corresponding to the target file and sending the authentication result to the service system, so that the service system processes the file access request according to the authentication result. Therefore, more flexible and more accurate access control can be realized.

The invention discloses an automatic construction system and method for an access control strategy of a high-level information system. According to the scheme, information resource acquisition is carried out on software and hardware products in a whole network system based on an information resource acquisition module, an access control mechanism hierarchical division module, a subject-object andrelationship carding module, a high-level demand gradual essence module, an automatic strategy generation module and an information resource acquisition module; the access control mechanism hierarchical division module performs hierarchical division on an access control mechanism; the subject-object and relationship carding module caries a subject, an object and a relationship structure thereof byanalyzing the subject, the object and the relationship structure thereof in the whole network system; the high-level demand gradual essence module is used for gradually refining the essence service access demand and the operation and maintenance management access demand; and the automatic strategy generation module generates an access control strategy of each access control mechanism level. According to the scheme, in the resource access process of a network system user, accurate access control can be carried out on the user no matter what level access is carried out.

The invention discloses an access control method based on a security state of a terminal host. The method comprises the following steps: judging an access state of an access terminal accessing network resources so as to judge to directly switch the access terminal to a network access device or enable the access terminal to enter an admission stage, wherein the admission stage comprises management registration, registration audit, security detection, authentication and authority management. According to the access control method disclosed by the invention, the objectives of device security, personnel security and network resource access security are achieved in stages, and the device network access flows are refined; the network access flows are more accurate by a plurality of states, accurate network access control of devices in different states is realized, and differential control of different users of different devices is realized.

The embodiment of the invention provides a credit rating consumption rule reporting method, an admittance control method and a device. The credit rating consumption rule reporting method comprises the following steps: obtaining modulation modes supported by cells; generating credit rating consumption rules corresponding to different modulation modes and different spread spectrum factors accordingto the modulation modes supported by the cells; and reporting the credit rating consumption rules to a wireless network controller. The embodiment of the invention provides the technical scheme that the credit rating consumption rules are generated according to different modulation modes and spread spectrum factors, and the credit rating consumption rules are reported, so the credit rating consumption condition of a base station can be correctly calculated through the wireless network controller. Thereby, the admittance control can be accurately carried out on users, and at the same time, a large number of failed flow processes generated between the wireless network controller and an IUB interface of the base station are avoided.

The invention provides an access controller, an access control method and a computer readable storage medium. The access controller comprises a first sound detection module; a second sound detection module; a processor which is configured to determine a first relative angle between the access controller and the intelligent equipment at the first position point and a second relative angle between the access controller and the intelligent equipment moving from the first position point to the second position point; when it is determined that the moving track of the intelligent equipment meets thepreset condition based on the first relative angle and the second relative angle, an unlocking instruction is sent to the access. According to the embodiment of the invention, intelligent unlocking based on the change of the relative angle is realized.

The embodiment of the invention provides a database access control method, a database access control system and related equipment, which are used for reducing the granularity of database access control and improving the security of data access. The method of the embodiment of the invention comprises: receiving a database operation request, and parsing operation information and authentication information in the database operation request, wherein the operation information at least comprises an operation object table; verifying whether the authentication information is valid or not, and if the authentication information is valid, judging whether the operation object table exists in a preset white list or not; and if the operation object table exists in a preset authorization white list, executing a corresponding operation in the database operation request, and if the operation object table does not exist in the preset authorization white list, not allowing the corresponding operation inthe database operation request.

The invention provides a dynamic access control method based on a business body, which relates to the technical field of system access control, and comprises the following steps: abstracting a business system to obtain an initial business body BEInit; a user sends an access request to a service system, a user attribute acquisition method in an initial service body BEInit acquires user attributes, a complete service body is obtained, and a trust evaluation method in the service body evaluates a user trust level according to the user attributes; a trust judgment mechanism in the service body judges a user trust level and a service system security level attribute value of the service body; and if the user trust level is higher than the service system security level attribute value of the service body, allowing the user to continue to access. According to the method, access control is carried out based on the business body by introducing a business body concept, and flexible, rapid and safe access control authorization is realized in an open and complex super application system environment.

Embodiments of the present invention provide a method and device for reading network access control parameters. The method for reading the network access control parameters of the present invention includes: the user equipment UE reselects back to the serving cell, or the UE switches from a dedicated state to a non-dedicated state in the serving cell; the UE acquires the network status identifier of the serving cell; Flag to determine if the system message block needs to be read. In the embodiment of the present invention, the call optimization system information block reading method reduces the power consumption caused by unnecessary reading of the system information block by the UE, so that the UE can update the stored system information block information in a timely manner, which is consistent with the network side. In order to make network access control more accurate.

The invention provides an access control method and device. The method comprises the steps: receiving an access request of a target user, wherein the access request carries a token; matching user data of the target user according to the token; determining a user role to which the target user belongs according to the user data; calling a request rule base, and obtaining a request rule associated with the user role in the request rule base; and determining whether the access request is matched with the associated request rule, and if yes, determining that the access verification is passed. Through the scheme, the problems of low security degree and overlarge data load in the existing access control process are solved, and the technical effects of accurate security control and relatively low data load are achieved.

Using RESOURCE STATUS INDICATION signaling message or AUDIT RESPONSE signaling message carries LICENSE capability indication information (CII) and reports CII to base station controller. Concretely, it is realized by using the said signaling messages to carry resource group IE, and setting up Local Cell Group ID as systemic uncommon specific value in signaling message or adding field to carry CII. The invention makes software capability limited base station possible to report actual capability and rules of resource expenditure precisely. Thus, base station controller can master resource capability and condition of use in base station accurately in order to use techniques that need to know condition of resource use of base station in advance such as admittance control etc.

The invention provides an access controller, an access control method and a computer readable storage medium. The access controller comprises a first sound detection module; a second sound detection module; a processor which is configured to enable the first sound detection module to detect a first sound signal which is sent by the intelligent equipment and directly reaches the first sound detection module, and enable the second sound detection module to detect a second sound signal which is sent by the intelligent equipment and directly reaches the second sound detection module, wherein the first sound signal and the second sound signal are sent by the intelligent equipment at the same time; determining the time difference between the receiving moment of the first sound signal and the receiving moment of the second sound signal; determining a relative angle between the access controller and the intelligent equipment based on the distance between the first sound detection module and the second sound detection module and the time difference; and when it is determined that the relative angle is within a preset angle range, sending an unlocking instruction to the entrance guard. Intelligent unlocking based on the relative angle is achieved.