Network resource access control method based on identity authentication and data packet filtering technology

Abstract

The invention relates to a network resource access control method based on an identity authentication and data packet filtering technology, and belongs to the field of computer networks. A network request initiated by a user is intercepted on a client, the user is required to complete identity authentication, and after the authentication is successful, the client forwards user identity information and an access request to a server; and the server intercepts the network request, verifies whether the request passes the identity authentication, and permits the user to access the specified network resource if the request passes the identity authentication. A layer is inserted into the Socket through an SPI programming interface provided by Windows Sockets, network data packets are filtered, and the purpose of filtering network connection requests is achieved; in combination with a third-party identity authentication system, functions of identity authentication and the like are realized through an interface provided by the third-party identity authentication system. According to the invention, identity authentication and fine-grained network resource access control can be realized quickly at low cost, and the method can be quickly adapted to third-party identity authentication to meet identity authentication requirements in different scenes.

Description

technical field [0001] The invention belongs to the field of computer networks, and in particular relates to a network resource access control method based on identity authentication and data packet filtering technology. Background technique [0002] With the development of information technology, information has become an important asset of organizations. The protection of information assets is getting more and more attention, especially with the rapid development of network technology today, most organizations will complete operations such as data interaction through the network, and information becomes network resources. The risk of illegal access and use, how to implement network resource access control has become an urgent need. [0003] At present, the main network access control method is based on the policy configuration of routers, switches, firewalls and other devices, which can achieve the purpose and function of access control to a certain extent. However, thes...

AI Technical Summary

Problems solved by technology

[0008] The technical problem to be solved by the present invention is how to provide a network resource access control method based on identity authentication and data packet filtering technology, so as to solve the problem that the existing access control has the risk of illegal use of network resources and cannot prevent network resources in the internal network. Illegal access control, not conducive to fine-grained access control of network resources

Images