Method and system for resource access control in hybrid cloud environment

Abstract

This disclosure proposes a method and system for resource access control in a hybrid cloud environment, which receives instructions from a business system accessed by a user, injects valid identity information of the user at the source end of the network data packet, and intercepts the network data packet at the destination end of the network data packet. And analyze the user identity, through the relationship between the user and the accessed application defined in the policy list, determine whether to allow or reject the network data packet. The disclosed technical solution implements access control from the network driver layer, and strengthens the security protection of enterprise business systems.

Description

technical field [0001] The present disclosure relates to the technical field of information data processing, in particular to a method and system for resource access control in a hybrid cloud environment. Background technique [0002] With the increasingly mature and widely used cloud computing technology, its advantages in terms of cost, performance, reliability, and scalability have become increasingly prominent. Institutions and enterprises are gradually migrating their business systems from traditional data centers to hybrid cloud environments. . Hybrid cloud overcomes the inherent shortcomings of public cloud and private cloud by combining public cloud and private cloud, and is the main model and development direction of cloud computing. In a hybrid cloud environment, information resources are mostly provided to users in the form of hardware facilities, software systems, and data. Considering factors such as security, cost, and performance, the core system and data are...

AI Technical Summary

Problems solved by technology

Among them, the network firewall mainly works at the network layer and can only handle network-level access control, but cannot satisfy user-level access control; VPN technology has certain user-level access control capabilities, but data needs to be encrypted during transmission, and all data packets are encrypted. The VPN server is required for encryption and decryption, user identification, unpacking and reorganization, and implementation of access control policies, which can easily become a performance bottleneck and affect user experience; the IAM system is a system specially developed for user authentication and user-level access control, with single sign-on , authentication management, user authorization and security audit functions

However, the existing IAM system is usually only aimed at the private data center of a single enterprise, and is deployed and implemented in an intrusive manner. It is necessary to modify the existing system of the user, and the user authentication of the existing system is uniformly handed over to the IAM system server for processing and deployment. Difficult to maintain, high cost, and poor flexibility, it is only applicable to the private data centers of traditional large enterprises, and it is difficult to apply to the hybrid cloud environment

Images