Method and system for implementing user access control, third-party user server

Abstract

The invention discloses a user access control implementation method. The method includes the following steps that: a client determines a third party server to be accessed according to an IP address to be accessed and sends login information to the third party user server; after successfully authenticating the login information, the third party user server obtains user online information, queries user identities corresponding to online users in the online information and returns the user identities to the client; and the client obtains corresponding access control strategies through matching in local network equipment according to the user identities and starts access control operation corresponding to the access control strategies. The invention also discloses a user access control implementation system and a third party user server.

Description

technical field [0001] The invention relates to the technical field of network information security, in particular to a method and system for realizing user access control, and a third-party user server. Background technique [0002] Access control is one of the important foundations of system confidentiality, integrity, availability and legal use, and it is also one of the key strategies for network security prevention and resource protection. Access control provides a basic guarantee for the security of system information and data resources. The so-called access control refers to a means for the system to limit the user's ability to use data resources on the user's identity and the predefined policy group to which it belongs. The user management in the access control process can be divided into three parts: user organization structure, authentication server and policy controller from the perspective of structure; from the division of data flow, it can be divided into IP-t...

AI Technical Summary

Problems solved by technology

However, in the above access control process, only local network devices are used to maintain the user organizational structure, and user access control capabilities are provided based on the local organizational structure; however, in actual deployment, the user organizational structure is sometimes maintained on a third-party user server. In this scenario, the organizational structure of the local network device and the third-party user server constitutes a large functional redundancy, resulting in a waste of device resources

[0004] At the same time, in the actual use scenarios of large customers, the number of users stored on such third-party user servers will usually be large, generally in the order of tens of thousands; while in traditional implementation methods, the maintenance of the local organizational structure and support for users to go online and offline Actions occupy a large amount of resources of network equipment and become a key performance bottleneck to increase the number of users supported by network equipment

[0005] To sum up, using the existing technology, there is still no effective way to solve the problem of how to remove the functional redundancy between the local network device and the third-party user server, and how to affect the performance of the network device as the number of users continues to increase. solution

Images