Access control method based on dynamic game

Abstract

The invention discloses an access control method based on a dynamic game. The method comprises the access process, the game process and the feedback process. The access process is the access process that a subject has access to an object, and after the access subject puts forwards an access request, a permission set with which a user can be endowed is obtained, wherein the permission set corresponds to the assessed value of the latest access of the subject. The game process is a simulated game process between the access subject and the accessed object and an ultimate decision process of an access restraint mechanism, the Nash equilibrium is achieved through the dynamic game between the subject and the accessed object, the access subject is promoted to initiatively tend to the honest access, and the access restraint mechanism ultimately works out the acceptability to the access request proposed by the subject according to an access strategy. The feedback process is the process that according to the performance of the subject in the latest access, the access restraint mechanism works out the feedback value serving as the feedback information, and the feedback information is moderately amended. It is ensured that an access control mechanism provides more effective safety protection on the information, resources and services in the open network in the whole process.

Description

technical field [0001] The invention relates to the technical field of access control and information security, in particular to an access control method based on dynamic game, which enables the access control mechanism to provide more effective security protection for information, resources and services in an open network. Background technique [0002] Access control is a key technology to control the user's access request according to the set security policy, so as to protect the security of information, resources and services in computers and networks. Traditional access control technologies mainly include autonomous access control, mandatory access control, and role-based access control, as well as access control technologies such as semantic-based access control and context-based access control developed later. These technologies are mainly suitable for closed local area network. In the local area network, the identity of the user is determined. For the malicious acces...

AI Technical Summary

Problems solved by technology

[0003] (1) User identity is arbitrary and uncontrollable. A network node may be the subject of access or the object of access

[0004] (2) There is no centralized control center and authoritative nodes in the open network, and the participating nodes are independent of each other

[0005] (3) The relationship between the access subject and the accessed object is constantly changing. Facing the serious consequences of malicious access, there is a lack of corresponding punishment measures in the open network

[0006] (4) In an open dynamic network, in the face of a large number of access requests submitted by a large number of dynamically changing users every moment, it is not necessary for the system administrator to modify the access control list in real time and dynamically change the access rights according to the user's access behavior. realistic

However, the application of game theory to the field of access control is less common

Images