Security micro-service architecture based on zero-trust access strategy and implementation method

Abstract

The invention provides a security micro-service architecture based on a zero-trust access policy and an implementation method. The architecture comprises an identity authentication center, a micro-service domain, an internal security domain, a public API agent and a private API agent; the identity authentication center comprises an access policy module, an encryption and decryption module, a security production authentication module and a trust engine module; the trust engine module is used for executing identity verification and generating a short-term Access Token and a Refresh Token; the implementation process comprises the steps of requesting resources, performing single sign-on and identity verification, allocating permissions, returning Token, filtering and checking the validity of the Token to execute access. And when the calling party needs to arrive at the internal security domain, the private API agent is accessed through the Facade service, and the matched additional authorization level is transmitted. According to the method, the short-term Token is generated through identity verification and an authorization mechanism so as to protect the distributed micro-service isolated from the front-end system, the security priority level of the micro-service is adjusted in real time through the private API agent, the possible attack surface of the micro-service system is reduced, and a deep defense strategy is realized.

Description

technical field [0001] The invention belongs to the technical field of microservices, and in particular relates to a secure microservice architecture and an implementation method based on a zero-trust access strategy. Background technique [0002] Security is a long-standing problem in networked systems, and with the advent of microservices, security has become even more challenging. As a result of decomposing the system into smaller, independent and distributed units, a large number of entry points and communication flows arise. Microservices are becoming the new norm for software development in the enterprise design pattern, allowing to build software systems by composing lightweight services. Especially in the development of complex and distributed applications, it is an architectural design pattern that aims to solve the problems of scalability, scalability and ease of maintenance of online services. [0003] Furthermore, trust cannot simply be established between indi...

AI Technical Summary

Problems solved by technology

[0003] Furthermore, trust cannot simply be established between individual microservices in the network, often from different unknown providers

Problems with current microservices are: (1) As the logical and middle layers of the application are split into many smaller and independent parts, the attack surface will increase significantly

Images