Bidirectional security audit method and device in distributed system

Abstract

The invention discloses a bidirectional security audit method and a device in a distributed system. A controlled end (which at least comprises a client side accessed into the distributed system and a server in the distributed system) in the distributed system passes an identity authentication. After a user logs in the distributed system, the operation information of the user is audited by referring to authority information corresponding to the current role of the controlled end when the operation is executed each time; if the authority information comprises the operation authority, the controlled end is permitted to execute the operation, and otherwise, the controlled end is forbidden to execute the operation; therefore, the identity and the authority in operation are guaranteed to be legal and effective after a user, an application program, a server and various legal roles in a system application scene in the distributed system log in the system, and the safety of the system is guaranteed to the maximum extent.

Description

technical field [0001] The invention relates to a security control technology in a distributed system Background technique [0002] Distributed platform is a technology based on middleware. Middleware is an independent system software or service program. Distributed platform uses this technology to share resources among different servers and manage services and resources distributed on different servers in a unified manner. . When a user needs to use a service or resource, he or she sends a request for the required service / resource to the distributed platform through the client, and the distributed platform locates the service / resource requested by the user and finds the server where the service / resource is located. Send the request to the corresponding server for processing. After the server finishes processing, the processing result is still fed back to the client through the distributed platform. [0003] In a distributed system, in order to prevent security threats, se...

AI Technical Summary

Problems solved by technology

However, the server as the service provider does not have identifiable identity authentication, nor does it have any digital certificates and keys, let alone audit the legality of the server's operation, and cannot ensure that the services provided by such a server are legal, nor can it be identified Whether the obtained data is valid

Although the background server group is in a relatively isolated internal LAN, the security threat is small, but it cannot completely rule out internal leaks, or human behavior such as internal hackers

The mutual communication between servers cannot guarantee data security requirements. This level of security has little impact on ordinary Internet systems, but it is not enough for industrial Internet that requires high confidentiality. Once illegal acts occur, all The consequences are more serious

Images