A method and system for dynamically generating network layer tags

Abstract

The invention discloses a network layer mark dynamic generation method and system adapting to information object service security attributes. The method comprises the following steps: 1) setting a service security mark of a system object, and marking a service security attribute of the system object, wherein the service security mark comprises a security level and a service attribute; 2) enablingthe system object to be connected with a protocol stack and requesting to send network data; 3) enablingthe protocol stack to convert the service security mark in the request and generate a network layer service security mark, and encapsulate the network layer service security mark into the IP data packet, wherein the network layer service security mark indicates the security level and the servicetype of the data in the IP data packet. According to the method and system, related security mechanisms can be supported to implement fine-grained control in related network nodes or environments, and full-life-cycle management and control are realized according to data-oriented service security requirements in network transmission and other environments.

Description

technical field [0001] The invention relates to a method for marking data at the network layer according to the service security attribute of the data, and belongs to the technical field of network and information security. Background technique [0002] Access control is the main security mechanism in the field of information security. Traditional access control mainly solves the problem of access control between subject and object in a certain system. However, in the network environment, it is difficult for traditional access control methods to realize that after the relevant data enters other systems through the network, it can still instruct other systems to correctly understand the business security nature of the data, so that it can be accessed according to business security requirements in network transmission and other environments. Carry out full life cycle control. Contents of the invention [0003] Aiming at the requirement of full lifecycle management and cont...

AI Technical Summary

Problems solved by technology

However, in the network environment, it is difficult for traditional access control methods to realize that after the relevant data enters other systems through the network, it can still instruct other systems to correctly understand the nature of the business security of the data, so that it can be accessed according to business security requirements in network transmission and other environments. Carry out full life cycle management and control

Images