A distributed access control model and access method

Abstract

The invention discloses a distributed access control model and an access method. The method comprises: sending out access request information by an access control main body, and judging whether it isan access control object or not by a neighbor node of the access control main body according to the access request information; if yes, judging whether the access request of the access control main body conforms to its accessed control policy, and if yes, providing corresponding access content and operation; if not, returning information denying access; if not, analyzing the access request information, and judging whether the access control subject in the access request has permission to access the access control object in the access request according to the access control policy stored in thenode; if yes, forwarding the access request to its neighbor node, and repeating the above operation; if not, returning a reject message. The access control policy of the invention adopts a distributed management mode, so that each node in the network with which it has access relationship jointly manages the access control policy of the whole network. The access control policy of the invention adopts a distributed management mode, and each node in the network with which it has access relationship jointly manages the access control policy of the whole network.

Description

technical field

[0001] The invention relates to the technical field of computer security, in particular to a distributed access control model and an access method. The model utilizes distributed management and authorization to realize more secure and smooth access control in complex networks. Background technique

[0002] Computer science and technology is at the core of information technology. With the rapid development and popularization of communication technology, information technology and network technology, computer hardware, operating system, network security, database and other technologies have promoted the continuous transformation of information technology. While the open network brings great convenience and value to people, it also puts forward higher requirements for network security. Especially in terms of controlling user access to information and resources, it is necessary to ensure that the maximum sharing of network information and resources is realized u...

Images