Method, device, and system for controlling device access authority

Abstract

The invention provides a method, device, and system for controlling device access authority. The method comprises: acquiring basic data of authority control of an accessed device; binding a port withthe accessed device and determining whether binding is carried out successfully; if so, carrying out authorization on the accessed device according to an access port type and access authority requirement data; carrying out detection continuously and keeping a current VLAN state of the port, and detecting port collision statistics data, effectiveness of the identity state of the accessed device, and the online state of the accessed device; determining whether to cancel the access authority of the accessed device and dividing the port to a controlled VLAN based on the port type under the condition of meeting the cancelling condition; and cancelling binding between the port and the accessed device. Therefore, the full process including access authorization of the accessed device, illegal access prevention, and authorization cancellation is controlled and thus the legal accessed device is able to but is only able to obtain the access authority within a permission range, so that the illegalaccessed device is prevented from obtaining the access authority the same as the authorizing device and thus the safety of the Ethernet terminal device is improved substantially.

Description

technical field

[0001] The present invention relates to the technical field of network security control, in particular to a device access authority control method, device and system applied to intelligent control of Ethernet network security. Background technique

[0002] With the advancement of information network technology, Ethernet network technology and related products and systems have been rapidly and massively applied to various industries, and have become the infrastructure of an information society. However, following that, various hidden dangers of network security have become increasingly prominent, the most prominent of which is the access authority control problem of access devices connected to Ethernet ports.

[0003] At present, in the prior art, there are mainly the following technical solutions for solving the problem of access authority control of access devices connected to Ethernet ports:

[0004] Solution 1 is to control the access rights of access dev...

Images