A distributed access control model and access method

Abstract

The invention discloses a distributed access control model and an access method. The method comprises: sending out access request information by an access control main body, and judging whether it isan access control object or not by a neighbor node of the access control main body according to the access request information; if yes, judging whether the access request of the access control main body conforms to its accessed control policy, and if yes, providing corresponding access content and operation; if not, returning information denying access; if not, analyzing the access request information, and judging whether the access control subject in the access request has permission to access the access control object in the access request according to the access control policy stored in thenode; if yes, forwarding the access request to its neighbor node, and repeating the above operation; if not, returning a reject message. The access control policy of the invention adopts a distributed management mode, so that each node in the network with which it has access relationship jointly manages the access control policy of the whole network. The access control policy of the invention adopts a distributed management mode, and each node in the network with which it has access relationship jointly manages the access control policy of the whole network.

Description

technical field [0001] The invention relates to the technical field of computer security, in particular to a distributed access control model and an access method. The model utilizes distributed management and authorization to realize more secure and smooth access control in complex networks. Background technique [0002] Computer science and technology is at the core of information technology. With the rapid development and popularization of communication technology, information technology and network technology, computer hardware, operating system, network security, database and other technologies have promoted the continuous transformation of information technology. While the open network brings great convenience and value to people, it also puts forward higher requirements for network security. Especially in terms of controlling user access to information and resources, it is necessary to ensure that the maximum sharing of network information and resources is realized u...

AI Technical Summary

Problems solved by technology

As information storage and access become increasingly distributed, the existing object-centric centralized authorization access control can no longer meet the security and robustness requirements of current complex network access control.

In addition, the traditional centralized authorization access control model has defects such as low adaptability, single deployment and application methods, and easy to become the target of attackers, which cannot meet the security requirements of dynamic heterogeneous open networks for access control.

Images