Access control method based on policy review and authorization extension

Abstract

The invention discloses an access control authorization method based on policy review and authorization extension, which comprises the following steps: firstly, expanding the service type of traditional ABAC model resource authorization, and adding the concept of partial permission except permission and rejection; defining a strategy review module, checking whether the attributes of the user meet a review rule set and a privacy rule set in the strategy review module, checking rules in the review rule set firstly, and rejecting the service as long as one rule is not met; and after all the review rule sets are met, checking the privacy rule set, and displaying part of data or all data according to the matching condition of the user attribute and the privacy rule set. After an access control strategy of resources is formulated, all participated attributes in the system are uniformly described by applying an XACML (Extensible Access Control Markup Language). Fine-grained management of resources is realized, and flexibility is increased while privacy is guaranteed.

Description

technical field [0001] The invention belongs to the field of computer software development, and particularly relates to a safe and flexible user authorization method in a distributed computing environment. Background technique [0002] Access control is an indispensable part of the information security system, and it is also an important aspect of ensuring the security of distributed computing (including cloud computing services). Access control restricts access subjects so that protected information resources can only be accessed within the legal scope. With the increase in the number of cloud users and changes in computing and storage methods, resources have become difficult to centrally manage and control. How to innovate and research an access control model suitable for the cloud computing environment will become the key to solving cloud security threats. [0003] With the expansion of the number of roles in the cloud computing environment, the RBAC model has the proble...

AI Technical Summary

Problems solved by technology

However, the problem with the ABAC model is that resources with different protection requirements are not fine-grained enough, and the types of resource authorization are only permission and denial.

Images