A user-based method for controlling the access authority of operating system peripherals

Abstract

The invention discloses an operating system peripheral access permission control method based on users. The method includes the steps of firstly, building an equipment feature database, classifying the users into different user roles, building equipment application strategies and mandatory access control switches, and respectively building a user access control list, a user group access control list, and a user role access control list; updating the states of all the mandatory access control switches; secondly building and maintaining a system dialogue list; thirdly, monitoring equipment change in an operating system; fourthly, determining final access permission information according to peripheral equipment types, and controlling users' peripheral application in the operating system according to the mandatory access control switches and the final access permission information. The method is high in peripheral identification capability, safe and reliable, good in stability, good in universality, high in expandability, high in malware destroying preventing capability, fine in control granularity, and high in overall flexibility.

Description

technical field [0001] The invention relates to the technical field of computer security, in particular to a user-based method for controlling the access authority of operating system peripherals. Background technique [0002] With the popularity of portable storage devices and removable devices, data leakage poses an increasing threat to commercial companies and enterprises. Things like USB storage devices, scanners, and CD-ROM drives can be successfully connected to the company network without the IT administrator noticing, resulting in the disclosure of corporate confidential data. The use of portable devices also makes it easy for viruses and malware to infiltrate systems and ultimately compromise entire corporate networks. Companies and enterprises need to ensure that only trusted devices can access the system and authorized users can use devices while maintaining work efficiency, so as to ensure the security of corporate data. [0003] In the prior art, in the operat...

AI Technical Summary

Problems solved by technology

This method requires the driver to be compiled into a module and loaded into the system, and there are only two control modes for the use of the device, which are available and disabled. The granularity is relatively coarse, and it is impossible to differentiate the control according to the user.

To sum up, the existing equipment sealing and control methods have the problems of coarse control granularity and single control mode

Images