Unify internal control safety management methods, systems, media and electronic equipment

Abstract

The invention discloses a unified internal control safety management method, system, medium and electronic equipment. The method is realized through an identity identification and access management platform, including: creating an SDK for the identity identification and access management platform according to the commonality of authority of the business system, and converting all The above-mentioned business system accesses the identity recognition and access management platform; intercepts the user's business system access request and performs legality verification, and judges the authority of the user who sends a legal access request; monitors the operation behavior of the user's access to the business system through the SDK, and generates And store the user's audit log. The invention can conveniently connect new services to the identity recognition and access management platform by creating the SDK of the identity recognition and access management platform; and the SDK of the IAM will intercept the user's task request in the business system and monitor the user's operation behavior in real time, Realized unified domain account management, unified login, unified authority management platform, unified authority application and operation audit.

Description

Technical field [0001] The present invention relates to the field of information security management, in particular, is a unified internal control safety management method, system, computer readable storage medium, and electronic device. Background technique [0002] There are different business departments within the enterprise, and their internal support systems. At present, their own business support systems for enterprises often use separate certification authorization management. The systems between departments are basically polite, basically every business unit has Your own system, and each system is isolated from the unified account, authority, audit, etc., which is not conducive to unified management and security monitoring within the enterprise. [0003] The process of internal control safety management in the enterprise is mainly: 1. Establish a unified account system through public systems, such as: EHR, OA and other public systems implement a unified account system; 2...

AI Technical Summary

Problems solved by technology

Although the above two commonly used methods realize the function of enterprise internal control and security management, the application of method 1 is limited and can only be implemented in a small number of public systems, which is not universal and consumes a lot of resources; method 2 uses Reaching an agreement in each system only introduces a part of the public interface and then requires each system to cooperate with the access, the access process is duplicated, the system development cycle is long, and it is not convenient to audit the behavior of the operator

Images