Network access control model as well as method and terminal thereof

Abstract

The invention provides a network access control model as well as a method and a terminal thereof, used for allocating appropriate access right to a user who accesses a network resource. The network access control model comprises a user module, a right module, a character module, a body module, a rule module and a session module, wherein the user module is used for extracting at least one attribute of the user; the right module is used for defining one permission for execute one action to a protected object and defining a plurality of access rights to the network resource; the character module defines a plurality of characters, a plurality of access rights are preset for each character; the body module at least defines the attribute of the user; the rule module at least defines one rule, wherein the rule is used for allocating a matched character to the user based on the attribute, so that the user can access the network resource; and the session module is used for establishing, maintaining and cancelling association between the user and the matched character. By the network access control model as well as a method and a terminal thereof disclosed by the invention, appropriate access rights can be dynamically allocated to a strange access user, thus security of network access is enhanced.

Description

technical field [0001] The invention relates to network technology, in particular to a method and system for controlling access to network resources. Background technique [0002] In Web services, service requests and responses are usually transmitted through Simple Object Access Protocol (Simple Object Access Protocol, SOAP) messages based on HyperText Transport Protocol (HyperText Transport Protocol, HTTP), which makes traditional network layer firewalls view SOAP messages as Legal application layer protocol. If illegal users access unprotected Web services through SOAP messages, it may lead to unauthorized access and even bring harm to internal applications. In addition, some Web services may only be open to specific user groups, and only authenticated and authorized requesters can access the corresponding services. Therefore, effective access control to service requests is an important problem to be solved in Web service applications. [0003] The web service environm...

AI Technical Summary

Problems solved by technology

[0005] However, in the above method, the user's authority still needs to be set by the administrator, and there is still the problem of access by unfamiliar users.

Images