Access control method and system based on security tag

Abstract

The invention relates to an access control method and system based on a security tag; the method comprises the following steps of marking security permission for an information access subject, markinga security tag for the information, and generating a security policy according to a security requirement; when the information is in a circulation process, starting an access control mechanism in theinformation access subject to analyze the security tag in the information; matching the security permission and the security tag according to the security policy; and deciding the information flow direction according to a matched result, so as to achieve a purpose of controlling an information awareness range; and the security is improved.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to an access control system and method based on a security label. Background technique [0002] In the field of security, information is usually divided into different security levels, and personnel are also divided into different security clearance levels. Personnel with different security clearance levels have different access rights to information. For example, personnel with low security clearance levels cannot access high-level Information on security levels to comply with security requirements. When physical information is digitized and flows between different people, it is also necessary to mark the information with electronic security labels, and at the same time adopt an access control mechanism based on security labels to achieve the same flow rules of electronic information in cyberspace as in the real world. The rules of information circulation are exactly ...

AI Technical Summary

Problems solved by technology

[0005] The technology of the present invention solves the problem: overcomes the fact that the information generated in real time cannot be marked with a security label in real time and performs access control in the prior art, and provides an access control method and system based on a security label, which can control the information generated in real time in the network and the existing information Carry out security marking, mark its security level, security category and display attribute information, mark security permission for information access subjects in the network, generate security policies based on security requirements, and match information security labels and subject security permissions based on security policies in the process of information circulation. So as to achieve fine-grained access control to information, ensure that the circulation rules of electronic information in cyberspace are completely consistent with the information circulation rules in the real world, and improve security and reliability

Images