Access control method, device and system based on access control strategy

Abstract

The invention provides an access control method, an access control device and an access control system based on an access control strategy. The method comprises the steps of receiving a service accessrequest of an enterprise; configuring an identity type for the enterprise according to a service access permission of the enterprise, wherein the identity type indicates multiple identities of the different enterprise for the same service body; generating an access permission set of the enterprise according to the permission of the identity type to the service, wherein the access permission set comprises permissions corresponding to responsibilities of the different identity types; and according to the access permission set of the enterprise, identity type, organizational structure, roles ofservice participants and responsibility corresponding to each role, using an access control strategy based on roles for determining users in the enterprise, the roles of the users and the access permissions of the roles, wherein the access permissions of the roles inherit from the access permission set of the enterprise. By using the method, the different enterprises can achieve different access controls on the same service body by using the different identities.

Description

technical field [0001] The present invention relates to service data access technology, in particular to an access control method, device and system based on access control strategy. Background technique [0002] Role-Based Access Control (RBAC) is a mature permission model that is widely used in practice. Traditional access control models mainly include discretionary access control and mandatory access control. In the traditional permission model, permissions are usually directly assigned to users. In RBAC, the concept of roles is added, and the management of permissions is simplified by associating users with roles and roles with permissions. In an organization, roles are created to accomplish various tasks, users are given roles according to their responsibilities, and users can be easily assigned from one role to another. Roles can be given new permissions according to new requirements, and permissions can also be withdrawn from roles as needed. [0003] RBAC support...

AI Technical Summary

Problems solved by technology

[0009] 2) Since RBAC's access permission is set based on operations and objects, operations and objects are subordinate to specific business entities, lacking access control management of higher-level business entities

[0010] 3) Users belong to the enterprise, and the access control of the enterprise's own users needs to comply with the enterprise's access control for specific business entities. There is a lack of restrictions on user access control based on enterprise access control

Images