Unified internal control security management method and system, medium and electronic device

Abstract

The invention discloses a unified internal control security management method and system, a medium and an electronic device. The method is realized through an identity recognition and access management platform, and comprises the steps of creating an SDK of the identity recognition and access management platform according to the permission commonality of a service system, and accessing the servicesystem to the identity recognition and access management platform; intercepting the service system access request of the user, carrying out legality verification, and carrying out authority judgmenton the user sending out the legal access request; and monitoring an operation behavior of accessing the business system by the user through the SDK, and generating and storing an audit log of the user. According to the invention, by creating the SDK of the identity recognition and access management platform, a new service can be conveniently accessed to the identity recognition and access management platform, and the SDK of the IAM can intercept the task request of the user in the service system and monitor the operation behavior of the user in real time, so that the unified domain account management, unified login, unified authority management platform, unified authority application and operation audit are realized.

Description

technical field [0001] The present invention relates to the technical field of information security management, specifically, a unified internal control security management method, system, computer-readable storage medium and electronic equipment. Background technique [0002] There are different business departments and their internal support systems within the enterprise. At present, separate authentication and authorization management is usually used for the business support systems of different departments of the enterprise. The systems between the departments are basically independent. Basically, each business department has its own Its own system, and each system is isolated, rarely can achieve unified control of accounts, permissions, audits, etc., which is not conducive to unified management and security monitoring within the enterprise. [0003] The existing methods for internal control and security management of business systems of different departments in the ente...

AI Technical Summary

Problems solved by technology

Although the above two commonly used methods realize the function of enterprise internal control and security management, the application of method 1 is limited and can only be implemented in a small number of public systems, which is not universal and consumes a lot of resources; method 2 uses Reaching an agreement in each system only introduces a part of the public interface and then requires each system to cooperate with the access, the access process is duplicated, the system development cycle is long, and it is not convenient to audit the behavior of the operator

Images