Access control method and access control system for network server

Abstract

The invention discloses an access control method for a network server, which comprises the following steps: configuring an access authority parameter of a client comprising a client ID and a permissible accessed network address; establishing a two-branch search tree according to the configuration, and saving the access authority parameter by each node of which key word is an unsigned long data value converted according to the network address; converting an IP address sending out an access request into the unsigned long data value as a search key value; and searching a largest node key work less than or equal to the search key value in the two-branch search tree, rejecting access if the search result is idle, otherwise judging whether the IP address belongs to the network address corresponding to the searched node key word, rejecting the access if the IP address does not belong to the network address, otherwise determining that the IP address is the permissible accessed network address. The invention also discloses an access control system for the network server. Based on the two-branch search tree to perform mandatory access control, the method and the system have the advantages of high efficiency for judging the access address, and can accurately and reliably achieve flow control.

Description

【Technical Field】 [0001] The invention relates to a computer network, in particular to a web server (web server) access control method and control system. 【Background technique】 [0002] At present, most business systems use web services to open the external interfaces of the business system. When the system allows external clients to access, the integrity of the system may be threatened. Therefore, the system usually needs to ensure that it will not be Illegal access or traffic attacks. There are currently two types of access control, one is selective access control (Discretionary Access Control, referred to as DAC). The DAC system assigns access rights to clients. External clients need to log in when accessing the system, and the system verifies user identity through encryption algorithms. First of all, the realization of all these verification processes will bring a great burden to the system and reduce system efficiency. Second, the management of user names and passwords po...

AI Technical Summary

Problems solved by technology

This solution also has an obvious disadvantage: a large amount of concurrent requests from an external client will cause the web server to fail to access requests from other clients, causing legitimate requests to be rejected, and because too many concurrent requests are called to business services, resulting in The system is overloaded, which eventually leads to the suspension of business

Images