Iterable trust policy-based information access security system, equipment and medium

Abstract

The invention discloses an information access security system, equipment and medium based on an iterable trust policy, and relates to the technical field of information, and the system comprises the following steps: reading a configuration file and initializing trust thresholds of different user groups according to historical data; collecting multi-dimensional data of a user in real time, and preprocessing the multi-dimensional data; key features of the user are extracted from the preprocessed data, and a multi-factor trust evaluation model is constructed; based on a multi-factor trust evaluation model, the trust degree of the user is calculated, and a trust threshold value is dynamically adjusted; dynamically adjusting the access authority of the user according to the adjusted trust threshold; recording all operations of trust threshold adjustment and access permission change, and performing reexamination through user feedback; the trust degree of a user is calculated based on a multi-factor trust evaluation model, and a trust threshold value is dynamically adjusted. According to the method, the trust degree of the user can be accurately evaluated in real time, the real-time performance and accuracy of trust evaluation are improved, various security threats can be coped with in time, and the security and reliability of the system are improved.

Description

Technical Field

[0001] The present invention relates to the field of information technology, and in particular to an information access security system, equipment and medium based on iterative trust strategy. Background Art

[0002] In recent years, with the rapid development of information technology and the popularization of network applications, information security issues have become increasingly prominent, especially the security of information access control has become an important topic of research and application. Traditional information access control methods mainly rely on static permission management and authentication mechanisms, such as role-based access control (RBAC) and attribute-based access control (ABAC). Although these methods have improved the security of the system to a certain extent, their flexibility and adaptability are insufficient in the face of dynamically changing user behaviors and complex network environments. Especially in multi-user and multi-scenario application environments, static access control strategies are difficult to effectively respond to changing security threats, making the system vulnerable to attacks and abuse. In addition, traditional access control methods usually lack the ability to deeply analyze user behaviors and dynamically adjust them, and are unable to promptly discover and respond to potential security risks, which to a certain extent limits the overall security performance of the system.

[0003] Existing information access control technologies have many deficiencies when dealing with dynamically changing user behaviors and complex network environments. First, most existing systems lack the ability to comprehensively monitor and deeply analyze user behaviors. They can often only perform access control based on fixed rules and static user information, and are unable to capture users' abnormal behaviors and potential risks in a timely manner. Secondly, most existing trust assessment methods rely on a single assessment indicator, such as login frequency, operation records, etc., and lack a multi-dimensional, multi-level comprehensive assessment mechanism, resulting in low accuracy and reliability of trust assessment results. In addition, existing access control strategies usually use fixed time intervals or manual triggering when adjusting user permissions, and are unable to achieve dynamic, real-time permission adjustments, which is particularly insufficient when dealing with sudden security incidents. Summary of the invention

[0004] In view of the above existing problems, the present invention is proposed.

[0005] Therefore, the present invention provides an information access security system, device and medium based on an iterative trust strategy to solve the problems of insufficient flexibility and low security caused by the use of static permission management and a single trust evaluation method in existing information access control systems.

[0006] In order to solve the above technical problems, the present invention provides the following technical solutions:

[0007] In a first aspect, an embodiment of the present invention provides an information access security system based on an iterative trust policy, which includes a configuration management module that reads a configuration file and initializes trust thresholds of different user groups based on historical data;

[0008] Data collection module, collects multi-dimensional data of users in real time and performs pre-processing;

[0009] Feature extraction module, which extracts key features of users from preprocessed data and builds a multi-factor trust assessment model;

[0010] Trust evaluation module, based on a multi-factor trust evaluation model, calculates the user's trust and dynamically adjusts the trust threshold;

[0011] The access control module dynamically adjusts the user's access rights according to the adjusted trust threshold;

[0012] The log management module records all trust threshold adjustments and access rights change operations, and reviews them through user feedback.

[0013] As a preferred solution of the information access security system based on iterative trust strategy of the present invention, the steps of reading the configuration file and initializing the trust thresholds of different user groups according to historical data specifically include:

[0014] When the system starts, it first reads the various parameters and settings required for initialization in the configuration file;

[0015] Obtaining initial trust thresholds for different user groups from the configuration files;

[0016] Initialize trust thresholds for different user groups based on the parsed configuration files.

[0017] As a preferred solution of the information access security system based on iterative trust strategy of the present invention, wherein: the multi-dimensional data includes the user's login time, access frequency, operation type, device information, geographic location and social network relationship;

[0018] The preprocessing includes data cleaning and standardization.

[0019] As a preferred solution of the information access security system based on iterative trust strategy of the present invention, wherein: the key features include user behavior features, user device security features and user social network features;

[0020] Create a feature list and add the extracted features to the list in sequence to form a feature vector;

[0021] Verify the format of the feature vector and store the feature vector as a user feature dictionary;

[0022] The multi-factor trust evaluation model is constructed based on extracting the key features of users, including:

[0023] Get the storage path of the model file of the model path from the configuration file and verify whether the path exists and whether it is a file;

[0024] Define a standard model loading function to load the pre-trained trust assessment model from the specified path;

[0025] For models that are loaded successfully, verify the model type and the validity of the model attributes.

[0026] As a preferred solution of the information access security system based on iterative trust strategy described in the present invention, the calculation of the user's trustworthiness based on the multi-factor trust evaluation model specifically includes:

[0027] Select the random forest model, convert the feature vector into a format suitable for model prediction, and use the pre-trained trust evaluation model to predict the original trust score, expressed as:

[0028]

[0029] Among them, P i is the predicted original trust score of the i-th user, N is the number of decision trees in the random forest, and F i is the feature vector of the i-th user, T j is the jth decision tree, j is the decision tree index;

[0030] Define the trust calculation function, map the predicted original trust score to the model through the sigmoid function, and get the user's final trust. The expression is:

[0031]

[0032] Among them, T i is the trust of the i-th user, θ is the steepness parameter, and μ is the mean shift parameter.

[0033] As a preferred solution of the information access security system based on iterative trust strategy described in the present invention, the dynamically adjusting the trust threshold according to the trust calculation result specifically includes:

[0034] Continuously monitor network traffic, user behavior and system log data to collect real-time security information;

[0035] Integrate real-time threat intelligence systems to obtain the latest threat intelligence information on malicious IP addresses and known attack patterns;

[0036] Use anomaly detection algorithms to calculate anomaly scores based on system data and threat intelligence information to identify potential security threats;

[0037] Calculate the comprehensive threat index based on the detected abnormal behaviors and threat intelligence;

[0038] Dynamically adjust the trust threshold based on the comprehensive threat index.

[0039] As a preferred solution of the information access security system based on iterative trust policy of the present invention, the dynamically adjusting the user's access rights according to the adjusted trust threshold specifically includes:

[0040] Get the latest trust level and adjusted trust threshold for each user;

[0041] Preliminarily determine the user's access permission level based on the user's latest trust level and the adjusted trust threshold;

[0042] Calculate the access permission adjustment factor for each user to quantify the gap between the user's trust level and the trust threshold;

[0043] The user's access permission level is ultimately determined based on the access permission adjustment factor.

[0044] As a preferred solution of the information access security system based on iterative trust policy of the present invention, the recording of all trust threshold adjustment and access permission change operations and review through user feedback specifically includes:

[0045] Obtain the trust threshold before and after adjustment, and record the time and reason for the adjustment;

[0046] The trust threshold before and after adjustment, adjustment time and adjustment reason are recorded in the log file;

[0047] Obtain access rights before and after the change, and record the time and reason for the change;

[0048] Record the access rights before and after the change, the change time and the reason for the change in the log file;

[0049] The system collects feedback information including user ID, feedback content and feedback time submitted by the user;

[0050] Review the feedback to determine whether there is any misjudgment;

[0051] If there is a misjudgment, the system adjusts the trust threshold and access rights of the relevant users and records the adjustment operations.

[0052] In a second aspect, an embodiment of the present invention provides a computer device comprising a memory and a processor, wherein the memory stores a computer program, wherein: when the computer program is executed by the processor, any step of the information access security system based on an iterative trust policy as described in the first aspect of the present invention is implemented.

[0053] In a third aspect, an embodiment of the present invention provides a computer-readable storage medium having a computer program stored thereon, wherein: when the computer program is executed by a processor, any step of the information access security system based on an iterative trust policy as described in the first aspect of the present invention is implemented.

[0054] The beneficial effects of the present invention are as follows: by reading the configuration file and initializing the trust thresholds of different user groups according to historical data, the system can quickly configure the initial trust environment at startup, ensuring that the system has basic security protection at the initial startup; by collecting multi-dimensional data of users in real time and performing preprocessing, the system can comprehensively and accurately capture the dynamic behavior characteristics of users, and provide high-quality data support for subsequent trust evaluation; by extracting the key features of users from the preprocessed data and constructing a multi-factor trust evaluation model, the system can comprehensively and multi-angle evaluate the trust of users; by calculating the trust of users based on the multi-factor trust evaluation model and dynamically adjusting the trust threshold, the system can evaluate the trust of users in real time and accurately, and dynamically adjust the trust threshold according to the latest security information and threat intelligence, thereby improving the real-time and accuracy of trust evaluation and significantly improving the security and reliability of the system. BRIEF DESCRIPTION OF THE DRAWINGS

[0055] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the accompanying drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the accompanying drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other accompanying drawings can be obtained based on these accompanying drawings without paying creative work.

[0056] Figure 1 This is a flowchart of the information access security system based on iterative trust policy in Example 1.

[0057] Figure 2 This is a diagram for determining the access authority level of a user in Example 1. DETAILED DESCRIPTION

[0058] In order to make the above-mentioned objects, features and advantages of the present invention more obvious and easy to understand, the specific implementation methods of the present invention are described in detail below in conjunction with the accompanying drawings.

[0059] In the following description, many specific details are set forth to facilitate a full understanding of the present invention, but the present invention may also be implemented in other ways different from those described herein, and those skilled in the art may make similar generalizations without violating the connotation of the present invention. Therefore, the present invention is not limited to the specific embodiments disclosed below.

[0060] Secondly, the term "one embodiment" or "embodiment" as used herein refers to a specific feature, structure, or characteristic that may be included in at least one implementation of the present invention. The term "in one embodiment" that appears in different places in this specification does not necessarily refer to the same embodiment, nor does it refer to a separate or selective embodiment that is mutually exclusive with other embodiments.

[0061] Example 1, reference Figure 1 and Figure 2 , which is the first embodiment of the present invention, and which provides an information access security system based on an iterative trust policy, comprising the following steps:

[0062] Step 1: Read the configuration file and initialize the trust thresholds of different user groups based on historical data;

[0063] Collect multi-dimensional data of users in real time and perform pre-processing;

[0064] Extract key features of users from preprocessed data and build a multi-factor trust evaluation model;

[0065] Based on the multi-factor trust evaluation model, the user's trust is calculated and the trust threshold is adjusted dynamically;

[0066] Dynamically adjust the user's access rights based on the adjusted trust threshold;

[0067] All trust threshold adjustments and access rights changes are logged and reviewed with user feedback.

[0068] Reading the configuration file and initializing the trust thresholds of different user groups based on historical data specifically includes:

[0069] When the system starts, it first reads the various parameters and settings required for initialization in the configuration file, such as database connection information, log file path, model path, etc., to ensure that the system has basic security protection at the initial startup. The use of configuration files makes system parameters easy to adjust and maintain, and can be flexibly configured according to different application scenarios and needs;

[0070] Obtain the initial trust thresholds of different user groups from the configuration files, such as ordinary employees, senior managers, and technical support personnel. The reasonable setting of the initial trust threshold provides a reliable basis for subsequent dynamic adjustments, avoiding security risks caused by improper initial settings.

[0071] Initialize trust thresholds for different user groups based on the parsed configuration files.

[0072] Step 2: Multi-dimensional data includes the user's login time, access frequency, operation type, device information, geographic location, and social network relationships, ensuring that the system can capture the user's dynamic behavior in a timely manner and provide the latest data support for subsequent trust assessment;

[0073] Preprocessing includes data cleaning and standardization.

[0074] Specifically, data cleaning includes removing invalid and abnormal data, and standardization includes normalizing numerical data and encoding categorical data.

[0075] Step 3: Key features include user behavior features, user device security features, and user social network features;

[0076] Create a feature list and add the extracted features to the list in sequence to form a feature vector;

[0077] Verify the format of the feature vector and store the feature vector as a user feature dictionary;

[0078] The multi-factor trust evaluation model is constructed based on extracting the key features of users, including:

[0079] Get the storage path of the model file of the model path from the configuration file and verify whether the path exists and whether it is a file;

[0080] If the verification passes, the system will output a message that the model path is valid; otherwise, it will output a message that the model path is invalid and handle the corresponding error. This is done to ensure the correctness and accessibility of the model path and avoid path-related problems during subsequent loading.

[0081] Define a standard model loading function to load the pre-trained trust assessment model from the specified path;

[0082] If the loading is successful, the system will return the model object; if the loading fails, the system will capture the exception and record the error message, indicating that the loading failed;

[0083] Specific exception handling includes file not found exceptions and other unknown exceptions to ensure the robustness and reliability of the model loading process;

[0084] For models that are loaded successfully, verify the model type and the validity of the model attributes.

[0085] If the verification passes, the system will output a message indicating that the model preparation is successful; otherwise, it will output a message indicating that the model preparation has failed and handle the corresponding errors to ensure that the model can be used normally in the trust calculation module.

[0086] Step 4: Based on the multi-factor trust evaluation model, calculate the user's trust level, including:

[0087] Select the random forest model, convert the feature vector into a format suitable for model prediction, and use the pre-trained trust evaluation model to predict the original trust score, expressed as:

[0088]

[0089] Among them, P i is the predicted original trust score of the i-th user, N is the number of decision trees in the random forest, and F i is the feature vector of the i-th user, T j is the jth decision tree, j is the decision tree index;

[0090] Define the trust calculation function, map the predicted original trust score to the model through the sigmoid function, and get the user's final trust. The expression is:

[0091]

[0092] Among them, T i is the trust of the i-th user, θ is the steepness parameter, and μ is the mean shift parameter.

[0093] Step 5: According to the trust calculation result, dynamically adjust the trust threshold, including:

[0094] Continuously monitor network traffic, user behavior and system log data, collect real-time security information, and ensure the real-time and dynamic nature of the system;

[0095] Integrate real-time threat intelligence system to obtain the latest threat intelligence information of malicious IP addresses and known attack patterns to improve the threat perception ability of the system, and enhance the system's adaptability and security;

[0096] Use anomaly detection algorithms to calculate anomaly scores based on system data and threat intelligence information to identify potential security threats;

[0097] Based on the detected abnormal behaviors and threat intelligence, the comprehensive threat index is calculated, so that the system can respond to various security threats in a timely manner;

[0098] By dynamically adjusting the trust threshold based on the comprehensive threat index, the system can more accurately identify potential security threats and reduce the possibility of misjudgment and missed judgment.

[0099] Specifically, the expression of the comprehensive threat index is: C = α·A + β·T;

[0100] Among them, C is the comprehensive threat index, A is the abnormal behavior index, and the calculation formula is: a k is the severity of the kth abnormal behavior, K is the number of abnormal behavior categories, T is the threat intelligence index, and the calculation formula is t l is the severity of the lth category of threat intelligence, L is the number of categories of threat intelligence, α is the abnormal behavior weight parameter, and β is the threat intelligence weight parameter.

[0101] The expression for dynamically adjusting the trust threshold is: T th =T base +γ·(CC base );

[0102] in,' th is the adjusted threshold, T base is the initial trust threshold, C base is the benchmark comprehensive threat index, and γ is the adjustment coefficient, which is used to control the change range of the trust threshold.

[0103] The value range of the comprehensive threat index C is [0, 1]. The closer the value is to 1, the worse the security status of the system is, and the closer the value is to 0, the better the security status of the system is.

[0104] Adjusted trust threshold T th The value range of is [0, 1]. The closer the value is to 1, the higher the trust threshold is, and the closer the value is to 0, the lower the trust threshold is.

[0105] Step 6: Dynamically adjust the user's access rights based on the adjusted trust threshold. Specifically, the following are performed:

[0106] Obtain the latest trust level and adjusted trust threshold of each user to ensure the real-time and accuracy of data;

[0107] Based on the user's latest trust and the adjusted trust threshold, the user's access permission level is initially determined. If T i ≥T th , the user's access rights are "full" (full access); otherwise, the user's access rights are "restricted" (restricted access), ensuring the rationality and security of access rights;

[0108] Calculate the access permission adjustment factor for each user to quantify the gap between the user's trust level and the trust threshold;

[0109] The user's access permission level is ultimately determined based on the access permission adjustment factor.

[0110] The expression of access rights adjustment factor is:

[0111] Among them, H i The access permission adjustment factor for the i-th user.

[0112] Specifically, by dynamically adjusting access rights, the system can adjust user access rights in real time according to changes in user trust and trust threshold, thereby improving the flexibility and security of the system. Access rights are adjusted based on user trust and trust threshold, ensuring the fairness and transparency of the system and improving user trust and satisfaction. Dynamically adjusting access rights can restrict potential high-risk users in a timely manner, reducing security risks and improving the overall security of the system.

[0113] Step 7: Record all trust threshold adjustments and access rights changes, and review them based on user feedback. Specifically, include:

[0114] Obtain the trust threshold before and after adjustment, and record the time and reason of adjustment to ensure the traceability of the operation and improve user trust and satisfaction;

[0115] The trust threshold before and after adjustment, adjustment time and adjustment reason are recorded in the log file;

[0116] Obtain access rights before and after the change, and record the time and reason for the change;

[0117] Record the access rights before and after the change, the change time and the reason for the change in the log file;

[0118] The system collects feedback information including user ID, feedback content and feedback time submitted by the user;

[0119] Review the feedback to determine whether there is any misjudgment;

[0120] If there is a misjudgment, the system adjusts the trust threshold and access rights of the relevant users and records the adjustment operations.

[0121] This embodiment also provides a computer device, which is suitable for the information access security system based on an iterative trust policy, including: a memory and a processor; the memory is used to store computer executable instructions, and the processor is used to execute computer executable instructions to implement the information access security system based on an iterative trust policy as proposed in the above embodiment.

[0122] The computer device may be a terminal, and the computer device includes a processor, a memory, a communication interface, a display screen and an input device connected via a system bus. The processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system and a computer program. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The communication interface of the computer device is used to communicate with an external terminal in a wired or wireless manner, and the wireless manner can be achieved through WIFI, an operator network, NFC (near field communication) or other technologies. The display screen of the computer device may be a liquid crystal display screen or an electronic ink display screen, and the input device of the computer device may be a touch layer covering the display screen, or a key, trackball or touchpad provided on the housing of the computer device, or an external keyboard, touchpad or mouse, etc.

[0123] This embodiment also provides a storage medium on which a computer program is stored. When the program is executed by a processor, it implements the information access security system based on the iterative trust strategy proposed in the above embodiment; the storage medium can be implemented by any type of volatile or non-volatile storage device or a combination of them, such as static random access memory (Static Random Access Memory, referred to as SRAM), electrically erasable programmable read-only memory (Electrically Erasable Programmable Read-Only Memory, referred to as EEPROM), erasable programmable read-only memory (Erasable Programmable Read Only Memory, referred to as EPROM), programmable read-only memory (Programmable Red-Only Memory, referred to as PROM), read-only memory (Read-Only Memory, referred to as ROM), magnetic storage, flash memory, disk or optical disk.

[0124] In summary, the present invention reads the configuration file and initializes the trust thresholds of different user groups according to historical data, so that the system can quickly configure the initial trust environment at startup to ensure that the system has basic security protection at the initial startup; by collecting multi-dimensional data of users in real time and performing preprocessing, the system can comprehensively and accurately capture the dynamic behavior characteristics of users, and provide high-quality data support for subsequent trust evaluation; by extracting the key features of users from the preprocessed data and constructing a multi-factor trust evaluation model, the system can comprehensively and multi-angle evaluate the trust of users; by calculating the trust of users based on the multi-factor trust evaluation model and dynamically adjusting the trust threshold, the system can evaluate the trust of users in real time and accurately, and dynamically adjust the trust threshold according to the latest security information and threat intelligence, thereby improving the real-time and accuracy of trust evaluation and significantly improving the security and reliability of the system.

[0125] Example 2, referring to Table 1, is the second example of the present invention. To further verify the technical solution of the present invention, experimental simulation data of an information access security system based on an iterative trust strategy is provided.

[0126] A detailed experiment was conducted in a large enterprise internal network environment. The experimental subjects included different user groups, such as ordinary employees, senior managers, and technical support personnel. The main goal of the experiment was to evaluate the system's performance in dynamically adjusting trust thresholds and access rights, especially in dealing with complex network environments and potential security threats.

[0127] When the system starts, it first reads the various parameters and settings required for initialization in the configuration file, including the initial trust thresholds for different user groups.

[0128] The initial trust thresholds of different user groups are obtained from the configuration files, and the trust thresholds of different user groups are initialized according to the parsed configuration files. For example, the initial trust threshold of ordinary employees is set to 0.5, the initial trust threshold of senior managers is set to 0.7, and the initial trust threshold of technical support personnel is set to 0.6.

[0129] Collect multi-dimensional data of users in real time, including login time, access frequency, operation type, device information, geographic location and social network relationships.

[0130] Preprocess the collected data, including data cleaning and standardization, to ensure data consistency and availability.

[0131] The key features of users are extracted from the preprocessed data, including user behavior features, device security features, and social network features.

[0132] Create a feature list, add the extracted features to the list in sequence to form a feature vector, and verify the format of the feature vector.

[0133] The feature vectors are stored as user feature dictionaries, and a multi-factor trust evaluation model is constructed based on the extracted key features of users.

[0134] Get the storage path of the model file of the model path from the configuration file, and verify whether the path exists and is a file.

[0135] Define a standard model loading function to load a pre-trained trust assessment model from a specified path and verify the model type and the validity of the model's properties.

[0136] Select a random forest model, convert the feature vector into a format suitable for model prediction, and use a pre-trained trust assessment model to predict the raw trust score.

[0137] Define the trust calculation function, map the predicted original trust score to the model through the sigmoid function, and obtain the user's final trust.

[0138] Continuously monitor network traffic, user behavior and system log data, collect real-time security information, and integrate with real-time threat intelligence systems to obtain the latest threat intelligence information on malicious IP addresses and known attack patterns.

[0139] Use anomaly detection algorithms to calculate anomaly scores based on system data and threat intelligence information to identify potential security threats. Based on the detected abnormal behavior and threat intelligence, calculate the comprehensive threat index and dynamically adjust the trust threshold.

[0140] The latest trust level and adjusted trust threshold of each user are obtained, and the user's access permission level is preliminarily determined based on the user's latest trust level and adjusted trust threshold.

[0141] Calculate the access permission adjustment factor for each user, quantify the gap between the user's trust level and the trust threshold, and ultimately determine the user's access permission level based on the access permission adjustment factor.

[0142] All trust threshold adjustments and access rights changes are recorded and reviewed with user feedback to ensure the accuracy and reliability of the system.

[0143] The details are shown in Table 1 below:

[0144] Table 1 Experimental data record table

[0145]

[0146] As can be seen from the table, the initial trust threshold of ordinary employees is 0.5, and after the system's multi-factor trust evaluation, the final trust levels are 0.75 and 0.65 respectively. This shows that the system can dynamically improve the user's trust level based on the user's actual behavior and characteristics, reflecting the flexibility and accuracy of the system.

[0147] The initial trust threshold of senior managers is 0.7, and the final trust levels are 0.85 and 0.80 respectively, which also shows the dynamic adjustment ability of the system.

[0148] The initial trust threshold of the technical support staff was 0.6, and the final trust levels were 0.70 and 0.65, respectively, which further verified the effectiveness of the system.

[0149] The access right adjustment factor reflects the gap between the user's trust level and the trust threshold. The access right adjustment factors for ordinary employees are 1.2 and 1.1, respectively, indicating that the system dynamically adjusts access rights based on the user's trust level, improving the security and flexibility of the system.

[0150] The access rights adjustment factors for senior managers are 1.3 and 1.2, respectively, further illustrating the effectiveness and accuracy of the system among the senior user groups.

[0151] The access rights adjustment factors for technical support personnel are 1.1 and 1.0, respectively, which indicates that the system's adjustment strategy among different user groups is reasonable and effective.

[0152] Login time, access frequency and anomaly score are important factors affecting user trust. From the table, we can see that ordinary employees have earlier login time, higher access frequency, lower anomaly score and higher trust in the end.

[0153] Senior managers have earlier login times, higher access frequencies, moderate anomaly scores, and ultimately higher trust levels.

[0154] Technical support personnel have late login times, moderate access frequencies, low anomaly scores, and moderate final trust.

[0155] In summary, the present invention significantly improves the security and adaptability of the information access control system through innovative designs such as dynamic adjustment of trust thresholds, multi-factor trust assessment, real-time threat intelligence integration, dynamic adjustment of access rights, log management and user feedback, and effectively solves the shortcomings of the prior art.

[0156] It should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention rather than to limit it. Although the present invention has been described in detail with reference to the preferred embodiments, those skilled in the art should understand that the technical solutions of the present invention may be modified or replaced by equivalents without departing from the spirit and scope of the technical solutions of the present invention, which should all be included in the scope of the claims of the present invention.

Claims

1. An information access security system based on an iterative trust strategy, characterized in that: include, Configuration management module, which reads configuration files and initializes the trust thresholds of different user groups based on historical data; Data collection module, collects multi-dimensional data of users in real time and performs pre-processing; Feature extraction module, which extracts key features of users from preprocessed data and builds a multi-factor trust assessment model; Trust evaluation module, based on a multi-factor trust evaluation model, calculates the user's trust and dynamically adjusts the trust threshold; The access control module dynamically adjusts the user's access rights according to the adjusted trust threshold; The log management module records all trust threshold adjustments and access rights change operations, and reviews them through user feedback.

2. The information access security system based on iterative trust strategy as claimed in claim 1, characterized in that: Read the configuration file and initialize the trust thresholds of different user groups based on historical data, as follows: When the system starts, it first reads the various parameters and settings required for initialization in the configuration file; Obtaining initial trust thresholds for different user groups from the configuration files; Initialize trust thresholds for different user groups based on the parsed configuration files.

3. The information access security system based on iterative trust policy as claimed in claim 2, characterized in that: The multi-dimensional data includes the user's login time, access frequency, operation type, device information, geographic location and social network relationship; The preprocessing includes data cleaning and standardization.

4. The information access security system based on iterative trust policy as claimed in claim 3, characterized in that: The key features include user behavior features, user device security features, and user social network features, as follows: Create a feature list and add the extracted features to the list in sequence to form a feature vector; Verify the format of the feature vector and store the feature vector as a user feature dictionary; The multi-factor trust evaluation model is constructed based on extracting the key features of users: Get the storage path of the model file of the model path from the configuration file and verify whether the path exists and whether it is a file; Define a standard model loading function to load the pre-trained trust assessment model from the specified path; For models that are loaded successfully, verify the model type and the validity of the model attributes.

5. The information access security system based on iterative trust policy as claimed in claim 4, characterized in that: Based on the multi-factor trust evaluation model, the user's trust is calculated as follows: Select the random forest model, convert the feature vector into a format suitable for model prediction, and use the pre-trained trust evaluation model to predict the original trust score, expressed as: Among them, P i is the predicted original trust score of the i-th user, N is the number of decision trees in the random forest, and F i is the feature vector of the i-th user, T j is the jth decision tree, j is the decision tree index; Define the trust calculation function, map the predicted original trust score to the model through the sigmoid function, and get the user's final trust. The expression is: Among them, T i is the trust of the i-th user, θ is the steepness parameter, and μ is the mean shift parameter.

6. The information access security system based on iterative trust policy as claimed in claim 5, characterized in that: According to the trust calculation result, the trust threshold is dynamically adjusted as follows: Continuously monitor network traffic, user behavior and system log data to collect real-time security information; Integrate real-time threat intelligence systems to obtain the latest threat intelligence information on malicious IP addresses and known attack patterns; Use anomaly detection algorithms to calculate anomaly scores based on system data and threat intelligence information to identify potential security threats; Calculate the comprehensive threat index based on the detected abnormal behaviors and threat intelligence; Dynamically adjust the trust threshold based on the comprehensive threat index.

7. The information access security system based on iterative trust policy as claimed in claim 6, characterized in that: According to the adjusted trust threshold, the user's access rights are dynamically adjusted as follows: Get the latest trust level and adjusted trust threshold for each user; Preliminarily determine the user's access permission level based on the user's latest trust level and the adjusted trust threshold; Calculate the access permission adjustment factor for each user to quantify the gap between the user's trust level and the trust threshold; The user's access permission level is ultimately determined based on the access permission adjustment factor.

8. The information access security system based on iterative trust policy as claimed in claim 7, characterized in that: All trust threshold adjustments and access rights changes are recorded and reviewed with user feedback, specifically: Obtain the trust threshold before and after adjustment, and record the time and reason for the adjustment; The trust threshold before and after adjustment, adjustment time and adjustment reason are recorded in the log file; Obtain access rights before and after the change, and record the time and reason for the change; Record the access rights before and after the change, the change time and the reason for the change in the log file; The system collects feedback information including user ID, feedback content and feedback time submitted by the user; Review the feedback to determine whether there is any misjudgment; If there is a misjudgment, the system adjusts the trust threshold and access rights of the relevant users and records the adjustment operations.

9. A computer device comprising a memory and a processor, wherein the memory stores a computer program, wherein: When the processor executes the computer program, the steps of the information access security system based on iterative trust policy described in any one of claims 1 to 8 are implemented.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the information access security system based on iterative trust policy described in any one of claims 1 to 8 are implemented.

Images