User trust measurement method in zero-trust SDN network

A measurement method and technology of trust degree, applied in the field of virtual network, can solve problems such as attack damage and lack of credibility
CN112737824AInactive Publication Date: 2021-04-30积至(海南)信息技术有限公司
2 Cites 6 Cited by

Patent Information

Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
积至(海南)信息技术有限公司
Publication Date
2021-04-30
Estimated Expiration
Not applicable · inactive patent

Smart Images

  • Figure 1
    Figure 1
  • Figure 2
    Figure 2
  • Figure 3
    Figure 3
Patent Text Reader

Abstract

An embodiment of the invention discloses a user trust measurement method in a zero-trust SDN network, which adopts systematic and fine-grained access control in the SDN network, designs a control mechanism of network resource access based on the main thought of a zero-trust security architecture, innovatively proposes an access control method based on a user behavior zero-trust measurement value, arranges a zero-trust decision entity in an SDN network control plane, carries out intelligent and refined access control on each access behavior of a user, and realizes resource security protection in a virtual network. The user trust measurement method has very important significance in digital transformation of enterprises and governments in the future.
Need to check novelty before this filing date? Find Prior Art

Description

technical field

[0001] The invention relates to the technical field of virtual networks, and in particular relates to a method for measuring user trust in a zero-trust SDN network. Background technique

[0002] With the gradual maturity and improvement of virtualization standards, rapid network deployment and flexible adjustment become possible, and NFV (Network Function Virtualization, Network Function Virtualization) technology emerges as the times require. NFV uses virtualization technology to provide a new method for designing, deploying and managing network services. The main idea of ​​NFV is to decouple the physical network device and the network function running on it, which means that a network function (such as a firewall) can be regarded as an instance of ordinary software. This makes it possible to consolidate a large number of network devices into high-capacity servers. For a given service, it can be decomposed into multiple virtual network function VNFs (Virtu...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More