Access control method and device, computer equipment and computer readable storage medium

Abstract

The invention provides an access control method and device, computer equipment and a computer readable storage medium. The access control method comprises the following steps: receiving an access request; determining an entity layer corresponding to the access request, wherein the entity layer comprises four access entities which are respectively an access user, an access device, an access proxy service and a proxy service device; for each access entity, obtaining security evaluation data of the access entity, and calculating a security evaluation value of the access entity according to the security evaluation data; determining a security evaluation value of the access request according to the security evaluation values of all the access entities; when the security evaluation value of theaccess request is less than the security threshold, sending a command of blocking the access request to the access proxy service. According to the invention, the complexity of authority judgment can be reduced.

Description

technical field [0001] The present invention relates to the technical field of information security, in particular to an access control method, device, computer equipment and computer-readable storage medium. Background technique [0002] Traditional access control methods are usually based on physical boundaries, and with cloud services, mobile terminals, and network websites, physical boundaries have gradually disintegrated. Border security measures are failing. [0003] In order to improve the security and effectiveness of access control in the existing environment, an access control method is proposed in the prior art. In this access control method, the access object will not be directly exposed to the access subject, but between the access object and the access subject. Set up a trusted proxy service in between, and at the same time put forward the view of "zero trust" for the access subject, and the access control service will judge the authority of the access request...

AI Technical Summary

Problems solved by technology

[0004] However, the inventors found that, in order to improve the security of the access object, more trust evaluation rules need to be set when performing authority judgment, and each trust evaluation is responsible for being independent and unrelated to each other, which makes the authority judgment complicated. Therefore, an access method is provided. Control methods, devices, computer equipment, and computer-readable storage media to reduce the complexity of authority judgment have become a technical problem that needs to be solved urgently in this field

Images