Multi-strategy access control login method and device, computer equipment and storage medium

Abstract

The invention discloses a multi-strategy access control login method and a device thereof, computer equipment and a storage medium, which relate to the techniques of cloud security, wherein the resource access control in a server is to select at least two from role-based access control strategies, user group-based access control strategies, rule-based access control strategies, user attribute-based access control strategies and user-based access control strategies; and the token data of the user is analyzed to obtain corresponding authority information when the user logs in later, and if the authority information corresponds to the access authority, the corresponding authority data of the to-be-accessed resource is sent to the user side. The invention also relates to a blockchain technology, which realizes multi-control strategy access, adapts to more access control scenes, and improves resource data security.

Description

technical field [0001] The present invention relates to the technical field of cloud security, in particular to a multi-strategy access control login method, device, computer equipment and storage medium. Background technique [0002] Access control refers to judging whether an authenticated user has permission to access certain specified resources. It is a basic function of the system and plays a vital role in the security of the system. [0003] Currently, the commonly used access control policies are as follows: [0004] 1. Role-based access control (RBAC for short), which is mainly based on user role attributes, determines whether a user can access a certain resource through the association between the role bound by the user and the resource; [0005] 2. Group-based access control (GBAC for short), which is mainly based on user group attributes, determines whether a user can access a certain resource through the association between the group to which the user belongs a...

AI Technical Summary

Problems solved by technology

[0010] Embodiments of the present invention provide a multi-policy access control login method, device, computer equipment, and storage media, aiming to solve the problem that the access control policies in the prior art are all based on a single policy, such as a single role-based, or a single Based on user groups, the access control function is relatively simple, the applicable scenarios are limited, and the security of system resource data is low.

Images