Security-marker-based access control method and related system

Abstract

The embodiment of the invention discloses a security-marker-based access control method and a related system, which are used for performing unified management on the access control of a middleware layer over a subject. The method comprises that: a middleware kit acquires a web access request message; the middleware kit acquires a security marker of the subject and the name of an object from the web access request message, wherein the subject is an accessing party, and the object is an accessed party; the middleware kit queries the name of the object, and acquires a security marker of the object; and the middleware kit performs the access control on web accessing according to the security markers of the subject and the object. By the technical scheme, the unified management over the access control of the middleware layer over the subject can be realized; moreover, the method is implemented on the basis of the security markers, and is adapted to the development requirements of construction of a security marker protection level information system at the same time.

Description

technical field [0001] The invention relates to the technical field of middleware, in particular to an access control method and a related system based on a security mark. Background technique [0002] An important technology to protect information security is access control technology. The so-called access control refers to restricting the subject's access to certain objects according to the subject's identity and a predefined group to which it belongs. The implementation of access control has three main purposes: 1. To prevent illegal subjects from accessing protected objects. 2. Allow legal subjects to access protected objects. 3. Prevent unauthorized access to protected objects by legal subjects. [0003] In order to strengthen the work of information security protection, my country has promulgated the "Computer Information System Security Level Classification Criteria" and "Information System Security Level Protection Requirements", and established the information sec...

AI Technical Summary

Problems solved by technology

[0006] However, according to the current access control method that is operated by the application itself, each application needs to be developed for application and authorization, and it is impossible to manage the access control of the subject at the middleware layer in a unified manner, and it is also unable to adapt to the construction of security. Marking the need for development of protection-level information systems

Images