Access control method, terminal, server and system

Abstract

The invention discloses an access control method applied to a terminal. The method comprises the following steps: when a resource requester in a terminal is detected to send an access request to a server, collecting preset information of a resource requester, wherein the preset information comprises a plurality of pieces of attribute information related to the resource requester; generating a single data packet authorization request based on the preset information and the access request, and sending the single data packet authorization request to a server, and enabling the server to open a resource access port to a resource requester under the condition that the single data packet authorization request is forwarded to an authorization control system by the server and the authorization control system verifies the single data packet authorization request successfully. The invention also discloses an access control method applied to the server, a terminal, the server and an access controlsystem. The preset information of the resource requester is used as the authorization certificate, so that an attacker cannot forge the authorization data of the single data packet easily, and illegal access caused by leakage of the authorization information is avoided.

Description

technical field [0001] The present invention relates to the field of computer technology, in particular to an access control method, terminal, server and system. Background technique [0002] SPA (Single Packet Authorization, single packet authorization) is based on the filtering strategy of discarding packets by default, sending authentication and authorization requests through a single encrypted packet, so that the protected server opens a port to a specific client, and Clients that have not passed authentication and authorization cannot detect the protected service port, thereby improving system security. [0003] However, the existing single-packet authorization is based on a pre-established static single-factor authentication strategy. Once the authentication information is leaked, it is easy to forge the authentication request to obtain port access rights and illegally obtain server resources; In this case, the attacker can directly access server resources through th...

AI Technical Summary

Problems solved by technology

[0003] However, the existing single-packet authorization is based on a pre-established static single-factor authentication strategy

Once the authentication information is leaked, it is easy to forge the authentication request to obtain port access rights and illegally obtain server resources; Under this condition, the attacker can directly access server resources through the hijacked client

Images