Network-resource-access control method based on identity authentication and data-packet filtering technology

Abstract

The invention discloses a network-resource-access control method based on identity authentication and a data-packet filtering technology. A network access request is filtered at a network-resource-access requesting client and a server side and a network request initiated by a user is intercepted at the client and the user is required to complete identity authentication; after the authentication succeeds, the client forwards user identify information and the access request to the server side; and the server side intercepts the network request and verifies whether the request passes the identify authentication and if so, the user is allowed to access specified network resources. Through SPI programming interfaces provided by Windows Sockets, one layer is inserted into Socket to filter network data packets so that an objective of filtering network connection requests is realized; a third-party identity authentication system is used in combination to realize functions such as identity authentication and the like through interfaces provided by the third-party identity authentication system. The network-resource-access control method based on the identity authentication and the data-packet filtering technology combines the network-resource-access request with user identity authentication so that fine-grit network-resource access can be realized.

Description

technical field [0001] The invention belongs to the technical field of network security, and relates to a network resource access control method based on identity authentication and data packet filtering technology. Background technique [0002] With the development of information technology, information has become an important asset of organizations. The protection of information assets is getting more and more attention, especially with the rapid development of network technology today, most organizations will complete operations such as data interaction through the network, and information becomes network resources. The risk of illegal access and use, how to implement network resource access control has become an urgent need. [0003] At present, the main network access control method is based on the policy configuration of routers, switches, firewalls and other devices, which can achieve the purpose and function of access control to a certain extent. However, these acc...

AI Technical Summary

Problems solved by technology

[0004] First, there is still a risk of illegal use of network resources due to the lack of confirmation of the identity of network resource visitors during the access control process;

[0005] Second, it cannot prevent illegal access control of network resources in the internal network;

[0006] Third, it is not conducive to fine-grained access control to network resources

Images