Access control method based on dynamic trust thresholds

Abstract

The present invention discloses an access control method based on dynamic trust thresholds. The method comprises: 1) merging permissions having identical trust value requirements for an access subject into the same permission set, wherein an object has a plurality of permissions and a trust threshold is set for each permission; 2) creating a permission distribution record table for each permission set; 3) when a subject sends an access request to the object, inspecting whether the trust value of the subject satisfies the requirements or not; if so, allowing the access request and recording the access into the permission distribution record table of the corresponding permission set; if not, refusing to perform; and 4) adjusting the trust threshold of the permission corresponding to the object: after the access is fed back and evaluated as fraud and the set number of times is exceeded, performing increasing adjustment on the trust threshold and updating the permission distribution record table; and if the access is fed back and evaluated as no fraud behavior, performing decreasing adjustment on the trust threshold and updating the permission distribution record table. The access control method of the present invention can flexibly realize access control on resources.

Description

technical field [0001] The invention belongs to the field of computer network security, and specifically relates to an access control method based on a dynamic trust threshold, which is used to solve the problem of how to assign permissions according to the trust value when an entity accesses resources in an open network, and can realize detailed access permissions. Granular management. Background technique [0002] With the rapid development and wide application of computer network technology, the current network has developed from an early closed network to an open network facing a large number of external users. In an open network, the behavior and state of entities have strong autonomy and uncertainty. Entities can join a network to obtain resources and services at any time, and can also disconnect from the network at any time, or even rejoin other networks after changing their identity. In addition, in an open network, the same entity can be both a resource or service...

AI Technical Summary

Problems solved by technology

In addition, in an open network, the same entity can be both a resource or service provider and a resource user. There is no central authoritative node to rely on, and an entity cannot obtain all information about another entity.

[0003] Due to the dynamic and heterogeneous characteristics of open networks, traditional identity-based or role-based access control technologies cannot fully meet the security needs of open and dynamic networks.

Images