Permission access control method and system based on policy management

Abstract

The invention provides an authority access control method and system based on policy management. The method comprises the following steps: constructing an access controller to intercept an access request sent by a user terminal to an access object; verifying the user identity information through an access authentication protocol adopted by the user; authority strategy rules are obtained according to the user identity information and combined to generate access decision information, and the access decision information comprises an authorization decision; and if the authorization decision is passing, sending the access request to an access object, otherwise, returning access failure information. According to the method and the device, the problem that access cannot be realized due to the fact that objects are frequently added or deleted in a serial IAM technology is solved, unauthorized users are prevented from accessing, and the loss efficiency and the user experience are reduced while digital assets of enterprises are more intelligently and safely protected.

Description

technical field [0001] The invention relates to the field of authority access control, in particular to a method and system for authority access control based on policy management. Background technique [0002] With the business development of the enterprise, a large number of application systems have been derived within the enterprise, including self-developed, outsourced, private cloud deployment, and public cloud deployment application systems. The user identity authentication and authority access control brought by these application systems have caused obstacles to the intercommunication of user accounts and authority control within the enterprise. Application authorization is at the heart of an organization's security, which also means it is at the heart of productivity. Authorization determines what a digital identity can do within each application. Securing data and avoiding breaches is what authorization is all about, making sure the right people get the right acces...

AI Technical Summary

Problems solved by technology

In the face of the distributed and diffuse organization and user data in the enterprise, the old authority center can no longer support cross-tenant, cross-account system, cross-terminal, and separation of application and identity data. Under traditional IAM, in a specific access Enforcing so many rules in a request is very complex and prone to errors since there is no clear view of which rules will be applied to this request

And in the case of multiple applications, you may also face problems such as frequent addition or deletion of objects, unauthorized user access to objects, direct access to objects by users or devices, and the need to establish multiple access control models

It is no longer possible to control the granularity of permissions between systems by relying on personnel to maintain roles

Images