Dynamic access control method, device and computer-readable storage medium

Abstract

Embodiments of the present invention provide a dynamic access control method, device, and computer-readable storage medium. The embodiment of the present invention receives the access message sent by the communication device in the local area network to the external network, and detects whether the access message is a domain name blockchain domain name registration message, and if so, according to the domain name registration message of the domain name blockchain domain name The first IP address and the first port number corresponding to the domain name, enable the communication equipment in the external network to access the first IP address and the first port number, and obtain the second IP address and the second port in the blockchain ledger number, when it is determined that the second IP address and the second port number in the block chain account book are the IP address and port number of the communication device in the local area network, then the communication device in the external network is opened to match the second IP address and the second port number. The access of the number allows the firewall to dynamically update the access control list. Compared with manually configuring the access rules of the firewall, it improves the communication efficiency between the LAN and the external network.

Description

Technical field[0001]Embodiments of the present invention relate to communication technologies, and more particularly to a dynamic access control method, a device, and a computer readable storage medium.Background technique[0002]The so-called firewall refers to a combination of software and hardware devices, a protective barrier constructed between the internal network and the external network, the boundary between the private network and the public network. It is an image statement that acquires the security method. It is a combination of computer hardware and software that enables Internet and intranet to establish a security gateway (security gateway), protecting internal networks from illegal users, and firewall mainly by service access rules, verification tools, package filtering and The application gateway consists of four parts, the firewall is a software or hardware located between the computer and the network it is connected. All network communication and packets that the c...

AI Technical Summary

Problems solved by technology

In other words, people inside the company cannot access the Internet without going through the firewall, and people on the Internet cannot communicate with people inside the company.

[0004] The current enterprise firewalls are based on pre-configured access control lists. For example, several fixed servers in an enterprise can receive external access, but other servers are set through the firewall so that all access is prohibited.

However, if the LAN is located under a static firewall, the external network needs to manually configure the access rules of the firewall to access the terminal. If a large number of terminals need to be accessed by external network nodes, manual configuration will reduce the communication efficiency between the LAN and the external network.

Images