Terminal strategy management and execution method and system

Abstract

The invention discloses a terminal strategy management and execution method and system. The method comprises the following steps: completing preparation work of a strategy management unit; completingthe work of the strategy management unit by using a management method; verifying the work of the strategy management unit by using a verification method; and completing the authentication of the useridentity by using a decision-making method, matching the user identity with the strategy, and authorizing the asset access permission of the user if the matching is successful. The method and the system have the advantages that complex strategy logic is packaged into a template, configuration is achieved, logic multiplexing is supported, evaluation of the strategy effect is easy to complete, and compliance is easy to guarantee; the strategy expression can support a wide logic calculation range and is high in efficiency and easy to reuse; policy legality verification is added when a policy is newly added, modified and issued, so that risks brought to a terminal system by wrong policies are prevented; and meanwhile, the operation of the strategy is recorded, so that later query is facilitated.

Description

technical field [0001] The present invention relates to the field of terminal security, in particular to a terminal policy management and execution method and system. Background technique [0002] With the advent of the era of big data, data security and sensitive information issues are increasingly valued by individuals, enterprises and even countries. There are more and more detection methods for data security and system security, and security audit methods such as identity authentication, authorization, access control, auditing, and asset protection are widely used. Policy rules are used in the security audit process. [0003] Currently, policy configuration and management in most systems is done manually, or directly coded into the system. With the continuous expansion of network and terminal scale and frequent changes of services, the complexity of scenarios and policy logic is further increased. The number of policy rules is increasing day by day, the effect evaluat...

AI Technical Summary

Problems solved by technology

The scope of logical calculation supported by the expression language is limited. If complex logic is still implemented through hard coding, there will be problems such as low efficiency and difficult reuse.

Images