Data access method and data access system

Abstract

The embodiment of the present invention discloses a data access method and a data access system, wherein the data access method includes: the local authentication platform receives an access request sent by a local application belonging to the local authentication platform, and the access request carries a target The authentication platform and the target application belonging to the target authentication platform; the local authentication platform generates a first roaming ticket application request according to the access request; and sends the first roaming ticket application request to the target authentication platform, so that the target authentication platform according to the first A roaming ticket application request generates a corresponding first roaming ticket; the local authentication platform receives the first roaming ticket returned by the target authentication platform; and sends the first roaming ticket to the local application, so that the local application carries the first roaming ticket A roaming ticket accesses the target application. The data access method proposed by the invention can effectively improve the roaming access speed between security domains by generating and forwarding the roaming ticket in the authentication platform.

Description

Technical field [0001] The invention relates to the technical field of network security, in particular to a data access method and a data access system between multiple security domains. Background technique [0002] Security domains refer to different logical subnets or networks in the same system that are divided according to the nature of information, use subjects, security goals, and policies. Each logical area has the same security protection requirements and the same security access. Control and boundary control strategies, logical areas have a mutual trust relationship, and the same security domains share the same security strategy. [0003] In the prior art, when roaming access (ie, cross-domain access to applications) is required between multiple security domains, tickets are generally generated and forwarded through the roaming ticket center. For details, see figure 1 As shown, a roaming ticket center corresponds to multiple security domains (only two security domains are...

AI Technical Summary

Problems solved by technology

[0005] An embodiment of the present invention provides a data access method and data access system between multiple security domains to solve the roaming access process between security domains in the prior art. The authentication platform sends a request for a roaming ticket, and generates and forwards a roaming ticket and verifies and authenticates a roaming ticket, which may greatly increase the information carrying capacity and data processing capacity of the roaming ticket center, which will easily lead to a decrease in roaming access speed and roaming Problems such as system failure due to overload of information carrying capacity in the bill center

Images