A method and device for secure access control based on user

Abstract

The invention discloses a method and device for safe access control based on user, and it extends the state list of firewall, adds the list option of user strategy in the firewall system, and the list of user strategy records the information of user. After the firewall receives the data packet, it adds the list of user security strategy according to original IP address, and then auto correlation process is done according to searching result to realize safe access control. The invention solves the problems of auto correlation without mounting the client software on terminal computer, and adds the user name and cipher based on WEB for user accessing external network, improves the easiness, security and convenience, and reaches the aims that the firewall system can manage the authority of fine grain and trace the secure event.

Description

technical field [0001] The invention relates to a user-based security access control method and device, belonging to the technical field of network information security. Background technique [0002] A firewall is a security access control device placed in the middle of the network data path to isolate the corporate intranet and extranet. The firewall receives data packets from the network interface, and searches for security rules based on the source, destination address, protocol type, and protocol port of the data packet. Security rules allow policy data packets to be forwarded, and other disallowed data packets are discarded, thus ensuring network security. With the popularization of informatization and networkization of daily production and management processes in various industries, and the occurrence of security incidents such as network vulnerabilities and attacks, the ease of use of firewall security rule management configuration and the expansion of security functi...

AI Technical Summary

Problems solved by technology

[0003] This kind of security rule configuration based on packet address, protocol, and port requires security administrators to understand professional network terms, which is not easy to use.

[0004] In this security rule setting and filtering method, the object of access control is information such as the IP address of the network data packet, which cannot be well associated with the intranet users who actually use the network, so that fine-grained authority management and access control cannot be set. After-event tracking of security incidents

[0005] The method of statically binding the IP address to the user or the MAC address of the user's computer hardware is simple. In actual use, since the user can change his IP address without being controlled by the firewall, or the user changes the computer, etc., it brings security management advantages. inconvenience

[0006] The user authentication technology extended by the existing firewall needs to install the security client software on the terminal computer of each intranet user, which is inconvenient to use

Images