Access control method, system and electronic device

Abstract

Embodiments of the present application provide an access control method, system and electronic device, the method comprising: obtaining an attribute-based access control request; determining an access policy evaluation result according to the attribute-based access control request and a preset access policy; the access policy comprising a correspondence between attribute information and the access policy evaluation result; determining an access risk level of the access control request according to target feature information corresponding to the access control request; the target feature information comprising at least one of the following: a subject target trust value, historical access data, environmental attributes and an access request operation; and generating an access control evaluation result according to the access policy evaluation result and the access risk level. The method of the embodiments of the present application effectively improves the accuracy and effectiveness of access control, and greatly reduces the risk of leakage.

Description

Technical Field

[0001] This invention relates to the field of information security technology, and in particular to an access control method, system, and electronic device. Background Technology

[0002] With the continuous development and popularization of information technology, people are becoming increasingly dependent on information systems, and the security of information systems has become an increasingly prominent issue.

[0003] In related technologies, attackers exploit network security vulnerabilities to gain unauthorized access to information systems, thereby posing a security threat. Therefore, how to effectively implement access control and improve system security is a technical problem that urgently needs to be solved by those skilled in the art. Summary of the Invention

[0004] To address the problems in the prior art, embodiments of the present invention provide an access control method, system, and electronic device.

[0005] Specifically, the embodiments of the present invention provide the following technical solutions:

[0006] In a first aspect, embodiments of the present invention also provide an access control method, comprising:

[0007] Obtain attribute-based access control requests;

[0008] Based on attribute-based access control requests and preset access policies, determine the access policy evaluation result; the access policy includes the correspondence between attribute information and access policy evaluation results.

[0009] Based on the target feature information corresponding to the access control request, determine the access risk level of the access control request; the target feature information includes at least one of the following: subject target trust value, historical access data, environmental attributes, and access request operation;

[0010] Based on the access policy assessment results and access risk level, an access control assessment result is generated.

[0011] Furthermore, based on the target feature information corresponding to the access control request, the access risk level of the access control request is determined, including:

[0012] The uncertainty of the access history is determined based on historical access data; the uncertainty of the access history is used to represent the uncertainty of the values ​​of each element in the access history.

[0013] Determine the credibility of the environmental attributes corresponding to the access control request based on historical access data;

[0014] Determine the extent to which the access request operation corresponding to the access control request affects the security of the object;

[0015] The access risk value is determined based on the subject's target trust value, the uncertainty of access history, the credibility of environmental attributes, and the degree of impact of the access request operation on the object's security; the subject's target trust value is used to represent the trust value of the subject corresponding to the access control request.

[0016] The access risk level is determined based on the access risk value and the preset risk threshold.

[0017] Furthermore, the subject's target trust value is determined based on the following method:

[0018] Determine the direct and indirect trust values ​​of the subject corresponding to the access control request; the direct trust value of the subject is used to represent the trust of the subject by the domain where the object corresponding to the access control request is located; the indirect trust value of the subject is used to represent the trust of the subject by other domains outside the domain where the object corresponding to the access control request is located.

[0019] Based on the number of times the subject corresponding to the access control request accesses each domain and the access threshold, determine the weight of the subject's direct trust value in the subject's target trust value and the weight of the subject's indirect trust value in the subject's target trust value.

[0020] The subject's target trust value is determined based on the subject's direct trust value, indirect trust value, the weight of the subject's direct trust value in the subject's target trust value, and the weight of the subject's indirect trust value in the subject's target trust value.

[0021] Furthermore, indirect trust values ​​are determined based on the following methods:

[0022] Based on the trustworthiness of the subject corresponding to the access control request, obtain the subject's direct trust value in each domain and the domain trust rate of each domain;

[0023] Based on historical access data, obtain the number of times and the time of access control requests by the corresponding subject in each domain;

[0024] Based on the domain trust rate of each domain, the number of times the subject visits each domain and the access time, determine the weight of the direct trust value of each domain to the subject in the indirect trust value evaluation.

[0025] The indirect trust value is determined based on the subject's direct trust value in each domain and the weight of each domain's direct trust value in the indirect trust value assessment.

[0026] Furthermore, based on the access policy assessment results and access risk levels, an access control assessment result is generated, including at least one of the following:

[0027] If the access risk level is high, the access control assessment result is negative.

[0028] If the access policy evaluation result is negative, the access control evaluation result is also negative.

[0029] If the access policy assessment result is yes and the access risk level is medium risk, then the number of medium risk accesses in the subject attribute and / or object attribute is incremented by one; if the number of medium risk accesses in the subject attribute and / or object attribute is greater than the corresponding threshold for the number of medium risk accesses in the subject attribute and / or object attribute, the access control assessment result is no; otherwise, the access control assessment result is yes.

[0030] If the access policy assessment result is yes and the access risk level is low, the access control assessment result is yes.

[0031] Furthermore, after generating the access control assessment results based on the access policy assessment results and access risk levels, the following are also included:

[0032] Generate the access history corresponding to the access control request;

[0033] The access feedback result is generated based on the access history corresponding to the access control request; the access feedback result includes the access feedback result type and the access feedback result value;

[0034] Generate a direct trust value for the subject corresponding to the attribute-based access control request based on the access feedback results;

[0035] Update the subject credibility in the stored subject attributes based on the subject's direct trust value.

[0036] Secondly, embodiments of the present invention provide an access control system, including:

[0037] The system comprises a strategy execution module, a strategy management module, a risk management module, and a strategy decision-making module.

[0038] The policy enforcement module is used to obtain attribute-based access control requests;

[0039] The policy management module is used to determine the access policy evaluation result based on attribute-based access control requests and preset access policies; the access policy includes the correspondence between attribute information and access policy evaluation results.

[0040] The risk management module is used to determine the access risk level of an access control request based on the target characteristic information corresponding to the access control request; the target characteristic information includes at least one of the following: subject target trust value, historical access data, environmental attributes, and access request operation;

[0041] The strategy decision module is used to generate access control assessment results based on the access policy assessment results and access risk levels.

[0042] Furthermore, the access control system also includes at least one of the following:

[0043] The module consists of three parts: the first module, the strategy information module, the history record management module, and the credibility management module.

[0044] The first module is used to send target access requests to the policy execution module;

[0045] The policy enforcement module is used to extract the subject identifier and / or object identifier from the target access request and send the subject identifier and / or object identifier to the policy information module;

[0046] The policy information module is used to obtain the target attributes corresponding to the target access request based on the subject identifier and / or object identifier; and send the target attributes to the policy execution module; the target attributes include at least one of the following: subject attribute, object attribute, and environment attribute;

[0047] The policy enforcement module is used to generate attribute-based access control requests based on the target attributes and / or the access request operations corresponding to the target access request, and send the attribute-based access control requests to the policy decision module.

[0048] The strategy decision module is used to receive attribute-based access control requests and send them to the strategy management module and the risk management module.

[0049] The risk management module is used to receive attribute-based access control requests and send them to the history management module.

[0050] The history management module is used to obtain historical access data based on attribute-based access control requests and send it to the risk management module; the historical access data is related to at least one attribute corresponding to the attribute-based access control request.

[0051] The risk management module is used to extract the subject credibility from the subject attributes corresponding to the attribute-based access control request, and send the subject credibility and subject historical access data to the credibility management module;

[0052] The trust management module is used to generate a target trust value for a subject based on the subject's trustworthiness and historical access data, and then send it to the risk management module.

[0053] The policy decision module is used to send the generated access control evaluation results to the policy execution module;

[0054] The policy enforcement module is used to generate an access token based on the access control assessment result and return it to the first module; the access token carries the access authorization result corresponding to the target access request; or the policy enforcement module is used to return the access control assessment result and / or object to the first module based on the access control assessment result.

[0055] The first module is used to perform access operations based on the access token or access control assessment results.

[0056] Furthermore, the first module is used to generate the access history corresponding to the access control request and send it to the history management module after performing the access operation based on the access token or access control assessment result.

[0057] The history management module generates access feedback results based on the access history corresponding to the access control request and sends them to the trust management module; the access feedback results include the access feedback result type and the access feedback result value;

[0058] The trust management module is used to generate a direct trust value for the subject corresponding to the attribute-based access control request based on the access feedback results, and send the subject's direct trust value to the policy information module.

[0059] The policy information module is used to update the subject credibility in the stored subject attributes based on the subject's direct trust value.

[0060] Thirdly, embodiments of the present invention also provide an electronic device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor, when executing the program, implements the access control method as described in the first aspect.

[0061] Fourthly, embodiments of the present invention also provide a non-transitory computer-readable storage medium having a computer program stored thereon, wherein the computer program, when executed by a processor, implements the access control method as described in the first aspect.

[0062] Fifthly, embodiments of the present invention also provide a computer program product, including a computer program that, when executed by a processor, implements the access control method as described in the first aspect.

[0063] The access control method provided in this invention obtains attribute-based access control requests, and then accurately and comprehensively assesses the access risk level based on the target feature information corresponding to the access control requests, namely, the subject's trust value, historical access data, environmental attributes, and current request operations. Furthermore, it determines the access control assessment result based on two dimensions: the access risk level and the access policy assessment result. This effectively improves the accuracy and effectiveness of access control and greatly reduces the risk of leakage. Attached Figure Description

[0064] To more clearly illustrate the technical solutions in this invention or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are some embodiments of this invention. For those skilled in the art, other drawings can be obtained from these drawings without creative effort.

[0065] Figure 1 This is a flowchart illustrating the access control method provided in an embodiment of the present invention;

[0066] Figure 2 This is a schematic diagram of the access control system provided in an embodiment of the present invention;

[0067] Figure 3 This is another structural schematic diagram of the access control system provided in an embodiment of the present invention;

[0068] Figure 4 This is a schematic diagram of the access control process based on the access control system provided in an embodiment of the present invention;

[0069] Figure 5 This is a schematic diagram of the structure of the electronic device provided in an embodiment of the present invention. Detailed Implementation

[0070] To make the objectives, technical solutions, and advantages of this invention clearer, the technical solutions of this invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some, not all, of the embodiments of this invention. All other embodiments obtained by those skilled in the art based on the embodiments of this invention without creative effort are within the scope of protection of this invention.

[0071] The access control system of this invention can be applied in information security scenarios to effectively implement access control and improve system security.

[0072] In related technologies, attackers exploit network security vulnerabilities to gain unauthorized access to information systems, thereby posing a security threat. Therefore, how to effectively implement access control and improve system security is a technical problem that urgently needs to be solved by those skilled in the art.

[0073] The access control method of this invention obtains attribute-based access control requests, and then accurately and comprehensively assesses the access risk level based on the target feature information corresponding to the access control requests, namely, the subject's trust value, historical access data, environmental attributes, and current request operations. Furthermore, it determines the access control assessment result based on two dimensions: the access risk level and the access policy assessment result. This effectively improves the accuracy and effectiveness of access control and greatly reduces the risk of leakage.

[0074] The following is combined with Figures 1-5 The technical solution of the present invention will be described in detail with reference to specific embodiments. The following specific embodiments can be combined with each other, and the same or similar concepts or processes may not be described again in some embodiments.

[0075] For example, the specific process of the access control method in this embodiment of the invention is as follows:

[0076] Step 101: Obtain the attribute-based access control request;

[0077] Specifically, in order to improve system security and reduce the risk of leakage, the embodiments of this application first obtain attribute-based access control requests; optionally, the attribute-based access control requests include, but are not limited to, any combination of one or more of the subject attributes, object attributes, environment attributes, and access request operations corresponding to the access control requests.

[0078] Optionally, subject attributes include, but are not limited to, general subject attributes and / or subject security attributes. General subject attributes include, but are not limited to, subject identifier and domain. Subject security attributes include, but are not limited to, trust level, number of medium-risk accesses, and threshold for the number of medium-risk accesses. The subject represents the initiator of the access, including but not limited to users and processes. The domain represents a set of elements with the same or similar functional requirements, including but not limited to any combination of domain name, domain trust rate, and security level. The domain trust rate represents the trustworthiness of the domain, generated based on the domain's security level. Trust Value (TV) represents the trustworthiness of the subject across different domains, denoted as TV = {<d1,tv1> ,…, <d n ,tv n >}, where d i For domain, tv i Indicates the subject in the domain d i The trust value is the direct trust value within the subject. A subject's trustworthiness is a security attribute that dynamically changes with access history, with the initial trustworthiness determined by the subject's attributes. Specifically, the "medium-risk access count" attribute refers to the number of times the subject has performed a medium-risk access request. The "medium-risk access count threshold" attribute limits multiple medium-risk accesses by the subject. If a subject's medium-risk access count is greater than or equal to the threshold, the access control assessment result will be "deny," even if the access risk level of that particular access is medium-risk.

[0079] Optionally, the object attributes include general object attributes and / or object security attributes. The object represents the object the subject requests access to, including but not limited to documents, images, etc. General object attributes include, but are not limited to, any combination of object identifier, generation time, and domain. Object security attributes include, but are not limited to, any combination of object integrity level, object confidentiality level, number of medium-risk accesses, threshold for the number of medium-risk accesses, object medium-risk threshold, and object high-risk threshold. The number of medium-risk accesses in the object attributes refers to the number of times the object is accessed that it is considered a medium-risk access. The object medium-risk threshold is calculated based on the object high-risk threshold and is the critical value for distinguishing between low-risk and medium-risk access. If the access risk value is greater than or equal to the medium-risk threshold, the access is considered medium-risk or high-risk; otherwise, it is low-risk. The object high-risk threshold is calculated based on the object security level and is the critical value for distinguishing between medium-risk and high-risk access. If the access risk value is greater than or equal to the high-risk threshold, the access is considered high-risk; otherwise, it is low-risk or medium-risk. To prevent an object from being accessed multiple times at medium risk, if the number of medium-risk accesses to an object is greater than or equal to the threshold for the number of medium-risk accesses to an object, the access control assessment result will be "reject" even if the access risk level of that access is medium risk.

[0080] Optionally, the environment attribute represents the context environment when the subject initiates the access request, including but not limited to any combination of access time, access location, access device, access point, etc.

[0081] Optionally, an access request operation represents the operation requested by a subject when initiating an access request, including operations such as read, write, execute, store, publish, forward, select, and comment. Operations include access request operations, authorization operations, and subject-specific operations. AOP represents the set of access request operations, POP represents the set of authorization operations, and ROP represents the set of subject-specific operations.

[0082] Step 102: Determine the access policy evaluation result based on the attribute-based access control request and the preset access policy; the access policy includes the correspondence between attribute information and the access policy evaluation result.

[0083] Specifically, after obtaining an attribute-based access control request, this embodiment queries the access policy based on any combination of subject attributes, object attributes, environment attributes, and access request operations. Optionally, the access policy evaluation result can be determined based on the access control request and the preset access policy. The access policy includes the correspondence between attribute information and the access policy evaluation result. Optionally, the access policy evaluation result indicates whether the subject's access request is allowed or denied, defining under what circumstances the subject is allowed or denied an operation on the object. It consists of subject attributes, object attributes, environment attributes, access request operations, and the type of access policy, denoted as p = <<sattr,oattr,eattr,op> ,type>,type∈{permit,deny}, where sattr is the subject attribute, oattr is the object attribute, eattr is the environment attribute, op is the access request operation, permit means allow access, and deny means deny access.

[0084] Step 103: Determine the access risk level of the access control request based on the target feature information corresponding to the access control request; the target feature information includes at least one of the following: subject target trust value, historical access data, environmental attributes, and access request operation;

[0085] Specifically, after obtaining the attribute-based access control request, this embodiment further determines the access risk level of the access control request based on the target feature information corresponding to the access control request. The target feature information includes at least one of the following: subject target trust value, historical access data, environmental attributes, and access request operations. That is, the risk management module can generate an access risk level based on any combination of the subject target trust value, historical access data, environmental attributes, and access request operations. Optionally, the subject target trust value represents the trust value of the subject corresponding to the access control request; historical access data (access history) includes a set of operations performed by the subject on the object, including but not limited to any combination of subject identifier, object identifier, environmental attributes, access request operation set, authorized operation set, and subject actual operation set; the access risk level includes three levels: high risk, medium risk, and low risk, where HR is high risk, MR is medium risk, and LR is low risk. High-risk access is access with an access risk value greater than or equal to the object's high-risk threshold; medium-risk access is access with an access risk value greater than or equal to the object's medium-risk threshold but less than the object's high-risk threshold; low-risk access is access with an access risk value less than the object's medium-risk threshold. This means that the access risk level was accurately and comprehensively assessed based on the subject's trust value, historical access data, environmental attributes, and current request operations.

[0086] Step 104: Generate access control assessment results based on the access policy assessment results and access risk levels.

[0087] Specifically, after determining the access risk level and the access policy assessment results, the access control assessment results can be determined jointly based on these two dimensions, thereby effectively improving the accuracy and effectiveness of access control and greatly reducing the risk of leakage.

[0088] The access control method described in the above embodiments obtains attribute-based access control requests and then accurately and comprehensively assesses the access risk level based on the target feature information corresponding to the access control requests, namely, the subject's trust value, historical access data, environmental attributes, and current request operations. Furthermore, it determines the access control assessment result based on two dimensions: the access risk level and the access policy assessment result. This effectively improves the accuracy and effectiveness of access control and greatly reduces the risk of leakage.

[0089] In one embodiment, determining the access risk level of an access control request based on the target feature information corresponding to the access control request includes:

[0090] The uncertainty of the access history is determined based on historical access data; the uncertainty of the access history is used to represent the uncertainty of the values ​​of each element in the access history.

[0091] Determine the credibility of the environmental attributes corresponding to the access control request based on historical access data;

[0092] Determine the extent to which the access request operation corresponding to the access control request affects the security of the object;

[0093] The access risk value is determined based on the subject's target trust value, the uncertainty of access history, the credibility of environmental attributes, and the degree of impact of the access request operation on the object's security; the subject's target trust value is used to represent the trust value of the subject corresponding to the access control request.

[0094] The access risk level is determined based on the access risk value and the preset risk threshold.

[0095] Specifically, in this embodiment of the invention, the access risk value is determined based on the subject's target trust value, the uncertainty of the access history, the credibility of environmental attributes, and the degree of impact of the access request operation on the object's security. The uncertainty of the access history represents the uncertainty of the values ​​of various elements in the access history; these elements include, but are not limited to, specific attributes in the access environment such as access location, access device, and access point, and operations in the subject's actual operation set. Optionally, the uncertainty of the access history can be determined using the following method:

[0096]

[0097] Where I(his) represents the uncertainty of the access history, and ηi F(x) represents the weight of each element in the access history. ij ) represents the probability that the i-th element takes the j-th value in the access history.

[0098] Optionally, in this embodiment of the invention, the credibility of the environment attribute corresponding to the access control request is determined based on historical access data; that is, the credibility of the current access environment is calculated based on historical access data and the current access environment. The specific value of the credibility of the current access environment can be calculated using the following methods, but is not limited to the following methods:

[0099]

[0100] Where f(eattr) represents the trustworthiness of the environment attribute corresponding to the access control request, and eattr i For the i-th environment attribute, u i H(eattr) represents the weight of each predefined specific environmental attribute in the credibility assessment of the current environment; i H(eattr) represents the credibility of the i-th environmental attribute. The credibility of the i-th environmental attribute can be obtained by the following steps: If the frequency of the i-th environmental attribute in the access history is greater than or equal to the access count threshold, then H(eattr) is considered to be credible. i ) = 0;

[0101] If the i-th environment attribute in the access history is valued as eattr i If the frequency of .value is less than the access count threshold, then...

[0102] Where M is the threshold for the number of visits, num(eattr) i .value) indicates that the i-th environment attribute in the access history has the value eattr i The frequency of .value.

[0103] Optionally, in this embodiment of the invention, the degree of impact of the access request operation corresponding to the access control request on the security of the object is determined using the following method:

[0104] pd=α×Dg(aop)+(1-α)×∑P(eop|aop)×Dg(eop)

[0105] Where pd represents the degree of impact of the access request operation corresponding to the access control request on the object security, α represents the weight of the damage to the object security caused by the current request operation in the total damage to security caused by all operations, P(eop|aop) represents the probability of executing the operation (eop) under the condition of the current request operation (aop), and Dg represents the damage to the object security caused by the operation.

[0106] Optionally, after determining the subject target trust value, the uncertainty of access history, the credibility of environmental attributes, and the degree of impact of access request operations on object security, the access risk value can be determined; wherein, the subject target trust value is used to represent the trust value of the subject corresponding to the access control request; and then the access risk level is determined based on the access risk value and the preset risk threshold.

[0107] Alternatively, the access risk value can be determined using the following methods:

[0108]

[0109] Where sar represents the access risk value, δ i (i = 1, 2, 3) represent the weights of the subject's target trust value, the uncertainty of the access history, and the credibility of the current access environment in assessing the access risk value, respectively. This represents the trust value of the main target.

[0110] Optionally, if the access risk value is greater than or equal to a preset high-risk threshold, the access risk level is high-risk; if the access risk value is greater than or equal to a preset medium-risk threshold and less than a preset high-risk threshold, the access risk level is medium-risk; if the access risk value is less than a preset medium-risk threshold, the access risk level is low-risk.

[0111] In real-world information systems, an untrusted access environment increases the probability of malicious access. Analyzing the trustworthiness of the current access environment in the access history improves the access risk level under untrusted conditions. Different operations have varying degrees of impact on the object; operations like modification and forwarding are far more harmful than read operations. By fully considering the degree of harm different operations cause to the object, the impact of different operations on the access risk level is appropriately adjusted. Introducing the concept of weights fully reflects the influence of different factors on the access risk level. The method in the above embodiments, in determining the access risk level, comprehensively considers the subject's target trust value, the uncertainty of access history, the trustworthiness of environmental attributes, and the impact of access request operations on the object's security. This makes the access risk level assessment method more scientific and reasonable, resulting in a more accurate and effective access risk level, and consequently, more accurate access control.

[0112] In one embodiment, the subject's target trust value is determined based on the following method:

[0113] Determine the direct and indirect trust values ​​of the subject corresponding to the access control request; the direct trust value of the subject is used to represent the trust of the subject by the domain where the object corresponding to the access control request is located; the indirect trust value of the subject is used to represent the trust of the subject by other domains outside the domain where the object corresponding to the access control request is located.

[0114] Based on the number of times the subject corresponding to the access control request accesses each domain and the access threshold, determine the weight of the subject's direct trust value in the subject's target trust value and the weight of the subject's indirect trust value in the subject's target trust value.

[0115] The subject's target trust value is determined based on the subject's direct trust value, indirect trust value, the weight of the subject's direct trust value in the subject's target trust value, and the weight of the subject's indirect trust value in the subject's target trust value.

[0116] Specifically, in this embodiment of the invention, when determining the target trust value of a subject, the direct trust value and indirect trust value of the subject corresponding to the access control request are first determined; wherein, the direct trust value of the subject is used to represent the trust of the subject by the domain where the object corresponding to the access control request is located; the indirect trust value of the subject is used to represent the trust of the subject by other domains outside the domain where the object corresponding to the access control request is located; optionally, the direct trust value of the subject can be obtained from the subject attributes.

[0117] Optionally, the number of accesses and access thresholds of the subject corresponding to the access control request in each domain can be obtained from historical access data to determine the weight of the subject's direct trust value and the weight of the subject's indirect trust value in the subject's target trust value; alternatively, the weight of the subject's direct trust value and the weight of the subject's indirect trust value in the subject's target trust value can be determined using the following methods:

[0118]

[0119] Where ω represents the weight, w is the number of times the subject visits the object's domain, and M is a preset threshold for the number of visits. When the number of times the subject visits the object's domain is greater than or equal to the preset threshold, the weight of the subject's direct trust value in the subject's target trust value is 1, and the weight of the subject's indirect trust value in the subject's target trust value is 0. When the number of times the subject visits the object's domain is less than the preset threshold and the number of times the subject visits other domains besides the object's domain is not 0, the weight of the subject's direct trust value in the subject's target trust value is... The weight of the subject's indirect trust value in the subject's target trust value is:

[0120] Optionally, after determining the subject's direct trust value, indirect trust value, the weight of the subject's direct trust value in the subject's target trust value, and the weight of the subject's indirect trust value in the subject's target trust value, the subject's target trust value can then be determined based on these factors. Optionally, if the subject's access count in all domains is 0, the subject's target trust value is the subject's direct trust value in that domain; if the subject's access count in the object's domain is 0 but its access count in other domains is not 0, the subject's target trust value is the subject's indirect trust value in that domain; if the subject's access count in the object's domain is greater than or equal to a preset access count threshold, the subject's target trust value is the subject's direct trust value in that domain; if the subject's access count in the object's domain is not 0 but less than a preset access count threshold, the subject's target trust value is the weighted average of the subject's direct and indirect trust values ​​in that domain.

[0121] The method described in the above embodiments determines the weight of the direct trust value in the overall trust value of the subject based on the number of times the subject corresponding to the access control request accesses each domain, effectively resisting discrimination attacks. A discrimination attack refers to an attacker performing well in other domains and performing normal access, while performing malicious access in the domain where the object is located. Because the attacker performs well in other domains, the direct trust value of the attacker in those domains is high, resulting in a high indirect trust value for the attacker in the domain where the object is located. If the weights of the direct and indirect trust values ​​are fixed, then even if the attacker continuously performs malicious access in the domain where the object is located, and the attacker's direct trust value in that domain is 0, the overall trust value of the attacker in that domain will not be 0 due to the high indirect trust value.

[0122] In one embodiment, the indirect trust value is determined based on the following method:

[0123] Based on the trustworthiness of the subject corresponding to the access control request, obtain the subject's direct trust value in each domain and the domain trust rate of each domain;

[0124] Based on historical access data, obtain the number of times and the time of access control requests by the corresponding subject in each domain;

[0125] Based on the domain trust rate of each domain, the number of times the subject visits each domain and the access time, determine the weight of the direct trust value of each domain to the subject in the indirect trust value evaluation.

[0126] The indirect trust value is determined based on the subject's direct trust value in each domain and the weight of each domain's direct trust value in the indirect trust value assessment.

[0127] Specifically, the indirect trust value of a subject is used to represent the trust that other domains outside the domain of the object corresponding to the access control request have in the subject; optionally, the indirect trust value of a subject can be determined in the following way:

[0128] First, the trust manager obtains the direct trust value of the subject in each domain based on the subject's trustworthiness; it also obtains the domain trust rate for each domain based on the subject's trustworthiness; optionally, the direct trust value of the subject in each domain can be determined through the subject's attribute information; optionally, the subject's trustworthiness can be determined through the subject's attribute information.

[0129] Then, based on the access history (historical access data), the number of times and the time of access by the subject in each domain are obtained;

[0130] Next, based on the domain trust rate of each domain in the subject's attributes, the number of times the subject visits each domain, and the access time of the subject in each domain, the weight of the direct trust value of each domain to the subject in the indirect trust value evaluation is calculated. Here, a domain represents a set of elements with the same or similar functional requirements, including but not limited to any combination of domain name, domain trust rate, and security level. The domain trust rate represents the trustworthiness of the domain and is generated based on the domain's security level. Optionally, if the number of times the subject visits domain K' is less than a preset access frequency threshold, then... If the number of times the subject accesses domain K' is greater than or equal to the preset access threshold, then Where, λ K The direct trust value of domain K' to the subject is important in the evaluation of indirect trust value; dtr K′ dtr represents the domain trust rate of domain K'. K τ represents the domain trust rate of domain K; τ represents a function with access time as a parameter; ft c Indicates the current access time; t o Indicates the last access time; w K′ This indicates the number of times the subject accesses domain K'; M represents the preset access threshold.

[0131] Finally, the indirect trust value is determined based on the subject's direct trust value in each domain and the weight of each domain's direct trust value in the indirect trust value assessment; optionally, the indirect trust value can be determined using the following method:

[0132]

[0133] Among them, ITV K As the indirect trust value of the subject in domain K, tv K , which is the direct trust value of the subject in the domain K′; ∑λ j It represents the sum of importance of all domains other than the domain in which the object resides; Let K′ be the weight of the direct trust value of the subject in the indirect trust value evaluation.

[0134] The method described in the above embodiments reflects domain similarity through the domain trust rate in the subject attributes. It comprehensively considers domain similarity, access frequency, and access time to calculate the importance of each domain's direct trust value in the indirect trust value assessment. Based on the importance of each domain's direct trust value in the indirect trust value assessment and the direct trust value of each domain to the subject, the indirect trust value is calculated. The assessment method is more scientific and reasonable, resulting in more accurate indirect trust values. Thus, the trust level of the subject can be more accurately determined from both direct and indirect trust values, i.e., the subject's target trust value and access risk level can be determined, improving the accuracy of access control.

[0135] In one embodiment, an access control assessment result is generated based on the access policy assessment result and the access risk level, including at least one of the following:

[0136] If the access risk level is high, the access control assessment result is negative.

[0137] If the access policy evaluation result is negative, the access control evaluation result is also negative.

[0138] If the access policy assessment result is yes and the access risk level is medium risk, then the number of medium risk accesses in the subject attribute and / or object attribute is incremented by one; if the number of medium risk accesses in the subject attribute and / or object attribute is greater than or equal to the corresponding threshold for the number of medium risk accesses in the subject attribute and / or object attribute, the access control assessment result is no; otherwise, the access control assessment result is yes.

[0139] If the access policy assessment result is yes and the access risk level is low, the access control assessment result is yes.

[0140] Specifically, the access control policy evaluation result can be determined first. If the access control policy evaluation result is negative, then the access control evaluation result is negative.

[0141] If the access control policy assessment result is yes, then the access risk level is further determined; optionally, if the access risk level is high risk, the access control assessment result is returned as no; if the access risk level is medium risk, then the number of medium-risk accesses corresponding to the subject attribute and the number of medium-risk accesses corresponding to the object attribute are each incremented by 1; if the number of medium-risk accesses corresponding to the subject attribute is greater than or equal to the threshold for the number of medium-risk accesses corresponding to the subject attribute, or the number of medium-risk accesses corresponding to the object attribute is greater than or equal to the threshold for the number of medium-risk accesses corresponding to the object attribute, then the access control assessment result is returned as no, otherwise the access control assessment result is returned as yes; if the access risk level is low risk access, the access control assessment result is returned as yes.

[0142] Alternatively, the access risk level can be determined first, and then the access control assessment result can be determined by combining the access control policy assessment result.

[0143] The method described in the above embodiments comprehensively evaluates access control based on two dimensions: access policy evaluation results and access risk level. This comprehensively and effectively controls malicious access to objects by legitimate users and reduces the risk of object leakage.

[0144] In one embodiment, after generating the access control assessment result based on the access policy assessment result and the access risk level, the method further includes:

[0145] Generate the access history corresponding to the access control request;

[0146] The access feedback result is generated based on the access history corresponding to the access control request; the access feedback result includes the access feedback result type and the access feedback result value;

[0147] Generate a direct trust value for the subject corresponding to the attribute-based access control request based on the access feedback results;

[0148] Update the subject credibility in the stored subject attributes based on the subject's direct trust value.

[0149] Specifically, after performing an access operation on the object, the first module is also used to generate an access history and send it to the history management module. The access history includes a set of operations performed by the subject on the object, including but not limited to any combination of subject attributes, object attributes, environment attributes, access request operation sets, authorization operation sets, and actual subject operation sets. The history management module generates access feedback results based on the access history and sends them to the trustworthiness management module. Optionally, the access feedback results are determined using the following method:

[0150] Optionally, when the access control evaluation result is "access denied," i.e., the access request of the subject is denied, the authorization operation set is empty, and the access feedback result fb is as follows:

[0151]

[0152] Where Im(o) is a preset object importance representation value;

[0153] Optionally, when the access control assessment result is "accept access," meaning the access request from the subject is accepted, the authorized operation set is not empty, and the subject's actual operation set is within the scope of the authorized operation set. The specific access feedback result fb is as follows:

[0154] fb = 1 × Im(o)

[0155] If the authorized operation set is not empty, and there exists a subject whose actual operation is outside the scope of the authorized operation set, the access feedback result fb will be as follows:

[0156] fb=(-1-∑num(uop)×Dg(uop))×Im(o)

[0157] Where Im(o) is the preset object importance characterization value; uop is the unauthorized operation, mum(uop) is the number of times the unauthorized operation uop is executed, and Dg(uop) is the preset degree of impact of the unauthorized operation on object security.

[0158] Optionally, the trust management module receives the access feedback result, generates a direct trust value for the subject based on the access feedback result, and sends the subject's direct trust value to the policy information module; optionally, each subject has a corresponding direct trust value, total positive feedback value, and total negative feedback value; the policy information module updates the trustworthiness in the subject's attributes based on the received direct trust value of the subject. Optionally, if the access feedback result is positive, the total positive feedback value is specifically:

[0159] fv c =fv o +fb

[0160] Among them, fv c fv is the current total positive feedback value. o This is the total positive feedback value from the last visit;

[0161] Optionally, if the access feedback result is negative, the total negative feedback value is as follows:

[0162] nfv c =nfv o +|fb|×N(s K )

[0163] Among them, nfv c nfv is the current total negative feedback value. o N(s) represents the total negative feedback value during the last visit. K ) represents the penalty rate, s K The number of times the subject accesses domain K;

[0164] Optionally, the direct trust value is calculated using the following steps:

[0165]

[0166] Among them, TV K As a direct trust value, The initial trust value represents the trust value of the subject when there is no access history; where u x u represents the total positive feedback value in the initial state.y This represents the total positive feedback value plus the total negative feedback value in the initial state; optionally, each subject has a corresponding direct trust value, total positive feedback value, and total negative feedback value.

[0167] That is, by changing u x and u y Adjusting the impact of a single visit feedback result on the direct trust value, u x u y The larger the value, the smaller the impact of a single visit's feedback on the direct trust value; x u y The smaller the value, the greater the impact of a single visit's feedback on the direct trust value. By implementing a penalty rate, the direct trust value exhibits a "slow rise and fast fall" characteristic, effectively resisting switch attacks and improving object security. A switch attack refers to an attacker performing well in the first few unimportant visits to increase the trust value, and then launching a malicious attack during important visits.

[0168] Optionally, after generating the direct trust value of the subject corresponding to the access request, the trust management module can send the direct trust value of the subject corresponding to the access request to the policy information module; thus, the policy information module can update the subject trust value in the stored subject attributes according to the received direct trust value of the subject.

[0169] The method in the above embodiments, after completing the operation on the object corresponding to the access control request, reflects the unauthorized operation of the subject by the difference between the authorized operation and the actual operation in the subject access, and introduces the concept of penalty rate to reduce the credibility of subjects with unauthorized access in the access history, increase the access risk value, and prevent access by such subjects. This reduces the probability of unauthorized access to the object after it leaves the subject to a certain extent. Access feedback results are generated based on the access history, and the credibility of the subject stored in the policy information module is dynamically updated based on the access feedback results. This achieves dynamic access control, reduces the risk of object leakage to a controllable range, and improves the accuracy of access control.

[0170] Figure 2 This is a schematic diagram of the access control system provided in an embodiment of the present invention. Figure 2 As shown, the access control system provided in this embodiment includes:

[0171] The strategy execution module 1, strategy management module 2, risk management module 3, and strategy decision-making module 4 are all included.

[0172] Policy enforcement module 1 is used to obtain attribute-based access control requests;

[0173] The policy management module 2 is used to determine the access policy evaluation result based on the attribute-based access control request and the preset access policy; the access policy includes the correspondence between attribute information and the access policy evaluation result;

[0174] Risk management module 3 is used to determine the access risk level of an access control request based on the target characteristic information corresponding to the access control request; the target characteristic information includes at least one of the following: subject target trust value, historical access data, environmental attributes, and access request operation;

[0175] The strategy decision module 4 is used to generate access control assessment results based on the access policy assessment results and access risk levels.

[0176] Specifically, the access control system in this embodiment includes a policy execution module 1, a policy management module 2, a risk management module 3, and a policy decision module 4; wherein, the policy execution module 1 is used to obtain attribute-based access control requests; optionally, the attribute-based access control requests include, but are not limited to, any combination of one or more of the subject attribute, object attribute, environment attribute, and access request operation corresponding to the access control request.

[0177] Optionally, subject attributes include, but are not limited to, general subject attributes and / or subject security attributes. General subject attributes include, but are not limited to, subject identifier and domain. Subject security attributes include, but are not limited to, trust level, number of medium-risk accesses, and threshold for the number of medium-risk accesses. The subject represents the initiator of the access, including but not limited to users and processes. The domain represents a set of elements with the same or similar functional requirements, including but not limited to any combination of domain name, domain trust rate, and security level. The domain trust rate represents the trustworthiness of the domain, generated based on the domain's security level. Trust Value (TV) represents the trustworthiness of the subject across different domains, denoted as TV = {<d1,tv1> ,…, <d n ,tv n >}, where d i For domain, tv i Indicates the subject in the domain d i The trust value is the direct trust value within the subject. A subject's trustworthiness is a security attribute that dynamically changes with access history, with the initial trustworthiness determined by the subject's attributes. Specifically, the "medium-risk access count" attribute refers to the number of times the subject has performed a medium-risk access request. The "medium-risk access count threshold" attribute limits multiple medium-risk accesses by the subject. If a subject's medium-risk access count is greater than or equal to the threshold, the access control assessment result will be "deny," even if the access risk level of that particular access is medium-risk.

[0178] Optionally, the object attributes include general object attributes and / or object security attributes. The object represents the object the subject requests access to, including but not limited to documents, images, etc. General object attributes include, but are not limited to, any combination of object identifier, generation time, and domain. Object security attributes include, but are not limited to, any combination of object integrity level, object confidentiality level, number of medium-risk accesses, threshold for the number of medium-risk accesses, object medium-risk threshold, and object high-risk threshold. The number of medium-risk accesses in the object attributes refers to the number of times the object is accessed that it is considered a medium-risk access. The object medium-risk threshold is calculated based on the object high-risk threshold and is the critical value for distinguishing between low-risk and medium-risk access. If the access risk value is greater than or equal to the medium-risk threshold, the access is considered medium-risk or high-risk; otherwise, it is low-risk. The object high-risk threshold is calculated based on the object security level and is the critical value for distinguishing between medium-risk and high-risk access. If the access risk value is greater than or equal to the high-risk threshold, the access is considered high-risk; otherwise, it is low-risk or medium-risk. To prevent an object from being accessed multiple times at medium risk, if the number of medium-risk accesses to an object is greater than or equal to the threshold for the number of medium-risk accesses to an object, the access control assessment result will be "reject" even if the access risk level of that access is medium risk.

[0179] Optionally, the environment attribute represents the context environment when the subject initiates the access request, including but not limited to any combination of access time, access location, access device, access point, etc.

[0180] Optionally, an access request operation represents the operation requested by a subject when initiating an access request, including operations such as read, write, execute, store, publish, forward, select, and comment. Operations include access request operations, authorization operations, and subject-specific operations. AOP represents the set of access request operations, POP represents the set of authorization operations, and ROP represents the set of subject-specific operations.

[0181] Optionally, after the policy execution module 1 obtains the attribute-based access control request and sends it to the policy management module 2, the policy management module 2 receives any combination of subject attributes, object attributes, environment attributes, and access request operations, and queries the access policy based on any combination of these four attributes, sending the query result to the policy decision module 4. Optionally, the policy management module 2 can determine the access policy evaluation result based on the access control request and the preset access policy. The access policy includes the correspondence between attribute information and the access policy evaluation result. Optionally, the access policy evaluation result indicates whether the subject's access request is allowed or denied, defining under what circumstances the subject is allowed or denied an operation on the object. It consists of subject attributes, object attributes, environment attributes, access request operations, and the type of access policy, denoted as p = <<sattr,oattr,eattr,op> ,type>,type∈{permit,deny}, where sattr is the subject attribute, oattr is the object attribute, eattr is the environment attribute, op is the access request operation, permit means allow access, and deny means deny access.

[0182] Optionally, after the policy execution module 1 obtains the attribute-based access control request, the risk management module 3 can also determine the access risk level of the access control request based on the target feature information corresponding to the access control request. The target feature information includes at least one of the following: subject target trust value, historical access data, environmental attributes, and access request operations. That is, the risk management module can generate an access risk level based on any combination of the subject target trust value, historical access data, environmental attributes, and access request operations, and send the access risk level to the policy decision module 4. Optionally, the subject target trust value represents the trust value of the subject corresponding to the access control request; historical access data (access history) includes a set of operations performed by the subject on the object, including but not limited to any combination of subject identifier, object identifier, environmental attributes, access request operation set, authorized operation set, and subject actual operation set; the access risk level includes three levels: high risk, medium risk, and low risk, where HR is high risk, MR is medium risk, and LR is low risk. High-risk access is defined as access with a risk value greater than or equal to the high-risk threshold of the object; medium-risk access is defined as access with a risk value greater than or equal to the medium-risk threshold of the object but less than the high-risk threshold of the object; and low-risk access is defined as access with a risk value less than the medium-risk threshold of the object. In other words, the access risk level is accurately and comprehensively assessed based on the subject's trust level, historical access data, environmental attributes, and the current request operation.

[0183] Optionally, after receiving the access risk level sent by the risk management module 3 and the access policy evaluation result sent by the policy management module 2, the policy decision module 4 can perform access control evaluation, generate access control evaluation results, and send them to the policy execution module to implement access control.

[0184] For example, such as Figure 3 As shown, the access control system in this application implements risk-based adaptive access control. When a subject initiates an access request to an object, the access risk level of this access is dynamically and comprehensively evaluated based on the subject's target trust value, access history, current access environment, and current request operation. Access control evaluation is performed based on the access risk level and access policy evaluation results to obtain the access control evaluation result.

[0185] In the access control system described above, the policy enforcement module obtains attribute-based access control requests. Then, the risk management module accurately and comprehensively assesses the access risk level based on the target feature information corresponding to the access control request, namely, the subject's trust value, historical access data, environmental attributes, and current request operations. Furthermore, the policy decision module jointly determines the access control assessment result based on the two dimensions of access risk level and access policy assessment result, effectively improving the accuracy and effectiveness of access control and greatly reducing the risk of leakage.

[0186] In one embodiment, the access control system further includes at least one of the following:

[0187] The module consists of three parts: the first module, the strategy information module, the history record management module, and the credibility management module.

[0188] The first module is used to send target access requests to the policy execution module;

[0189] The policy enforcement module is used to extract the subject identifier and / or object identifier from the target access request and send the subject identifier and / or object identifier to the policy information module;

[0190] The policy information module is used to obtain the target attributes corresponding to the target access request based on the subject identifier and / or object identifier; and send the target attributes to the policy execution module; the target attributes include at least one of the following: subject attribute, object attribute, and environment attribute;

[0191] The policy enforcement module is used to generate attribute-based access control requests based on the target attributes and / or the access request operations corresponding to the target access request, and send the attribute-based access control requests to the policy decision module.

[0192] The strategy decision module is used to receive attribute-based access control requests and send them to the strategy management module and the risk management module.

[0193] The risk management module is used to receive attribute-based access control requests and send them to the history management module.

[0194] The history management module is used to obtain historical access data based on attribute-based access control requests and send it to the risk management module; the historical access data is related to at least one attribute corresponding to the attribute-based access control request.

[0195] The risk management module is used to extract the subject credibility from the subject attributes corresponding to the attribute-based access control request, and send the subject credibility and subject historical access data to the credibility management module;

[0196] The trust management module is used to generate a target trust value for a subject based on the subject's trustworthiness and historical access data, and then send it to the risk management module.

[0197] The policy decision module is used to send the generated access control evaluation results to the policy execution module;

[0198] The policy enforcement module is used to generate an access token based on the access control assessment result and return it to the first module; the access token carries the access authorization result corresponding to the target access request; or the policy enforcement module is used to return the access control assessment result and / or object to the first module based on the access control assessment result.

[0199] The first module is used to perform access operations based on the access token or access control assessment results.

[0200] Specifically, such as Figure 4 As shown, the specific functions of each module in the access control system and the specific process of access control based on the access control system are as follows:

[0201] 401. The first module sends a target access request to the policy execution module;

[0202] The target access request includes, but is not limited to, any combination of one or more of the following: subject identifier, object identifier, subject attribute, object attribute, access request operation, and environment attribute. Optionally, the first module can receive the target access request sent by the user and send it to the policy execution module.

[0203] 402. The policy execution module extracts the subject identifier and / or object identifier based on the target access request and sends the subject identifier and / or object identifier to the policy information module;

[0204] 403. The strategy information module receives the subject identifier and / or object identifier sent by the strategy execution module, queries the subject attribute and / or object attribute based on the subject identifier and / or object identifier, and optionally queries the environment attribute, and sends any combination of the queried subject attribute, object attribute and environment attribute to the strategy execution module.

[0205] 404. The policy execution module receives any combination of subject attributes, object attributes, and environment attributes sent by the policy information module, and constructs an attribute-based access control request based on any combination of subject attributes, object attributes, environment attributes, and access request operations. The attribute-based access control request is then sent to the policy decision module. The attribute-based access control request includes, but is not limited to, any combination of one or more of the following: subject attributes, object attributes, environment attributes, and access request operations.

[0206] 405. The policy decision module receives attribute-based access control requests and sends them to the policy management module;

[0207] 406. The policy management module receives attribute-based access control requests and queries access policies (preset correspondence) based on any combination of subject attributes, object attributes, environment attributes, and access request operations in the access control request. The obtained access policy evaluation results are then sent to the policy decision module.

[0208] 407. The strategy decision module sends attribute-based access control requests to the risk management module;

[0209] 408. The risk management module receives attribute-based access control requests and sends them to the history management module. The history management module queries the access history based on the attribute-based access control requests and sends the access history to the risk management module.

[0210] 409. The risk management module extracts the credibility from the subject's attributes and sends the extracted subject's credibility and access history to the credibility management module; wherein, the subject's credibility is composed of the subject's direct trust value in each domain.

[0211] 410. The credibility management module generates the subject's target trust value and sends the calculated subject's target trust value (subject's comprehensive trust value) to the risk management module;

[0212] 411. The risk management module calls the access risk assessment algorithm to generate an access risk level based on any combination of the subject's comprehensive trust value, access history, access environment, and access request operation, and sends the access risk level to the strategy decision module.

[0213] 412. The policy decision module performs access control assessment based on the access policy assessment results and access risk level, generates access control assessment results, and sends them to the policy execution module.

[0214] 413. The policy enforcement module generates an access token based on the access control assessment result and returns it to the first module; wherein, the access token includes, but is not limited to, any combination of one or more of the following: subject identifier, object identifier, access control assessment result, authorization operation, and object resource address; or the policy enforcement module returns the access control assessment result and / or object to the first module.

[0215] 414. The first module performs access operations on the object.

[0216] The aforementioned access control system enhances its modularity by adding a first module, a policy information module, a history module, and a trust management module, thereby increasing the efficiency of access control. Furthermore, by querying the policy information module, even with only simple information such as subject or object identifiers, any combination of subject attributes, object attributes, and environmental attributes can be obtained to generate attribute-based access control requests. These requests then effectively implement access control, improving the system's applicability. The history module stores and queries user access history, and the trust management module determines the subject's target trust value. Based on this access history and the target trust value, the access risk level can be accurately determined, thus improving the accuracy of access control.

[0217] In one embodiment, the access control system further includes:

[0218] The first module is used to generate the access history corresponding to the access control request and send it to the history management module after performing the access operation based on the access token or access control assessment result.

[0219] The history management module generates access feedback results based on the access history corresponding to the access control request and sends them to the trust management module; the access feedback results include the access feedback result type and the access feedback result value;

[0220] The trust management module is used to generate a direct trust value for the subject corresponding to the attribute-based access control request based on the access feedback results, and send the subject's direct trust value to the policy information module.

[0221] The policy information module is used to update the subject trustworthiness in the stored subject attributes based on the direct trust value of the receiving subject.

[0222] Specifically, such as Figure 4As shown, the specific functions of each module in the access control system and the specific process of access control based on the access control system are as follows:

[0223] 414. After the first module performs an access operation on the object, it is also used to generate an access history and send it to the history management module, that is, to generate the access history corresponding to the access control request and send it to the history management module; optionally, the access history includes a set of operations performed by the subject on the object, including but not limited to any combination of subject attributes, object attributes, environment attributes, access request operation set, authorization operation set and subject actual operation set.

[0224] 415. The history management module generates access feedback results based on the access history and sends them to the credibility management module; the access feedback results include the access feedback result type and the access feedback result value;

[0225] 416. The trust management module receives the access feedback result, generates the direct trust value of the subject based on the access feedback result, and sends the direct trust value of the subject to the policy information module; wherein, the direct trust value of the subject is used to represent the trust of the domain where the object corresponding to the access control request is located on the subject.

[0226] The policy information module updates the trustworthiness in the subject's attributes based on the direct trust value of the receiving subject; the subject's trustworthiness is composed of the subject's direct trust values ​​in each domain. In other words, after the first module completes its operation on the object corresponding to the access control request, it generates access feedback results based on the access history, and dynamically updates the subject's trustworthiness stored in the policy information module based on the access feedback results. This enables dynamic updates of the subject's direct trust value, indirect trust value, target trust value, and access risk level, thus achieving dynamic access control, reducing the risk of leakage to a controllable range, and improving the accuracy of access control.

[0227] After the first module completes the operation on the object corresponding to the access control request, the aforementioned access control system generates access feedback results based on the access history and dynamically updates the credibility of the subject stored in the policy information module based on the access feedback results. This achieves dynamic access control, reduces the risk of object leakage to a controllable range, and improves the accuracy of access control.

[0228] Figure 5A schematic diagram of the physical structure of an electronic device is provided. This electronic device may include a processor 810, a communications interface 820, a memory 830, and a communication bus 840. The processor 810, communications interface 820, and memory 830 communicate with each other via the communication bus 840. The processor 810 can invoke logical instructions in the memory 830 to execute an access control method. This method includes: obtaining an attribute-based access control request; determining an access policy evaluation result based on the attribute-based access control request and a preset access policy; the access policy includes the correspondence between attribute information and the access policy evaluation result; determining the access risk level of the access control request based on the target feature information corresponding to the access control request; the target feature information includes at least one of the following: subject target trust value, historical access data, environmental attributes, and access request operation; and generating an access control evaluation result based on the access policy evaluation result and the access risk level.

[0229] Furthermore, the logical instructions in the aforementioned memory 830 can be implemented as software functional units and, when sold or used as independent products, can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, essentially, or the part that contributes to the prior art, or a part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of the present invention. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0230] On the other hand, the present invention also provides a computer program product, the computer program product comprising a computer program stored on a non-transitory computer-readable storage medium, the computer program comprising program instructions, wherein when the program instructions are executed by a computer, the computer is able to execute the access control method provided by the above methods, the method comprising: obtaining an attribute-based access control request; determining an access policy evaluation result based on the attribute-based access control request and a preset access policy; the access policy including the correspondence between attribute information and the access policy evaluation result; determining the access risk level of the access control request based on the target feature information corresponding to the access control request; the target feature information including at least one of the following: subject target trust value, historical access data, environmental attributes, and access request operation; and generating an access control evaluation result based on the access policy evaluation result and the access risk level.

[0231] In another aspect, the present invention also provides a non-transitory computer-readable storage medium storing a computer program thereon, which, when executed by a processor, is implemented to perform the aforementioned access control methods. The method includes: obtaining an attribute-based access control request; determining an access policy evaluation result based on the attribute-based access control request and a preset access policy; determining an access risk level of the access control request based on target feature information corresponding to the access control request; the target feature information includes at least one of the following: subject target trust value, historical access data, environmental attributes, and access request operation; and generating an access control evaluation result based on the access policy evaluation result and the access risk level.

[0232] The device embodiments described above are merely illustrative. The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the modules can be selected to achieve the purpose of this embodiment according to actual needs. Those skilled in the art can understand and implement this without any creative effort.

[0233] Through the above description of the embodiments, those skilled in the art can clearly understand that each embodiment can be implemented by means of software plus necessary general-purpose hardware platforms, and of course, it can also be implemented by hardware. Based on this understanding, the above technical solutions, in essence or the part that contributes to the prior art, can be embodied in the form of a software product. This computer software product can be stored in a computer-readable storage medium, such as ROM / RAM, magnetic disk, optical disk, etc., and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute the methods described in the various embodiments or some parts of the embodiments.

[0234] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, and not to limit them; although the present invention has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that modifications can still be made to the technical solutions described in the foregoing embodiments, or equivalent substitutions can be made to some of the technical features; and these modifications or substitutions do not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

1. An access control method, characterized in that, include: Obtain attribute-based access control requests; Based on the attribute-based access control request and the preset access policy, determine the access policy evaluation result; The access strategy includes the correspondence between attribute information and access strategy evaluation results; The access risk level of the access control request is determined based on the target feature information corresponding to the access control request; the target feature information includes at least one of the following: subject target trust value, historical access data, environmental attributes, and access request operation; Based on the access policy evaluation results and access risk levels, an access control evaluation result is generated; Determining the access risk level of the access control request based on the target feature information corresponding to the access control request includes: The uncertainty of the access history is determined based on historical access data; the uncertainty of the access history is used to represent the uncertainty of the occurrence of the values ​​of each element in the access history; the historical access data includes the weight of each element in the access history and the probability of the occurrence of the values ​​of each element in the access history; The credibility of the environmental attributes corresponding to the access control request is determined based on historical access data; Determine the degree of impact of the access request operation corresponding to the access control request on the security of the object; The access risk value is determined based on the subject's target trust value, the uncertainty of access history, the credibility of environmental attributes, and the degree of impact of the access request operation on the object's security; the subject's target trust value is used to represent the trust value of the subject corresponding to the access control request. The access risk level is determined based on the access risk value and the preset risk threshold. The method further includes: The target trust value of the subject is determined based on its direct trust value, indirect trust value, the weight of its direct trust value in the target trust value, and the weight of its indirect trust value in the target trust value. The direct trust value represents the trust of the subject by the domain containing the object corresponding to the access control request. The indirect trust value represents the trust of the subject by other domains besides the domain containing the object corresponding to the access control request. The indirect trust value is determined based on the subject's direct trust value in each domain and the weight of each domain's direct trust value in the indirect trust value evaluation. An access history corresponding to the access control request is generated. An access feedback result is generated based on the access history corresponding to the access control request. The access feedback result includes an access feedback result type and a value. The direct trust value of the subject corresponding to the attribute-based access control request is generated based on the access feedback result.

2. The access control method according to claim 1, characterized in that, Also includes: Based on the number of times the subject corresponding to the access control request accesses each domain and the access number threshold, determine the weight of the subject's direct trust value in the subject's target trust value and the weight of the subject's indirect trust value in the subject's target trust value. Based on the trustworthiness of the subject corresponding to the access control request, obtain the subject's direct trust value in each domain and the domain trust rate in each domain; Domain trust rate represents the level of trustworthiness of a domain and is generated based on the domain's security level; Based on historical access data, obtain the number of times and access time of the subject corresponding to the access control request in each domain; Based on the domain trust rate of each domain, the number of times the subject visits each domain, and the access time, the weight of the direct trust value of each domain to the subject in the indirect trust value evaluation is determined.

3. The access control method according to claim 1 or 2, characterized in that, The step of generating an access control assessment result based on the access policy assessment result and the access risk level includes at least one of the following: If the access risk level is high risk, the access control assessment result is no; If the access policy evaluation result is negative, the access control evaluation result is also negative. If the access strategy evaluation result is yes and the access risk level is medium risk, then the number of medium-risk accesses in the subject attribute and / or object attribute is incremented by one; if the number of medium-risk accesses in the subject attribute and / or object attribute is greater than the corresponding threshold for the number of medium-risk accesses in the subject attribute and / or object attribute, then the access control evaluation result is no; otherwise, the access control evaluation result is yes. If the access policy evaluation result is yes, and the access risk level is low risk, then the access control evaluation result is yes.

4. The access control method according to claim 3, characterized in that, After generating the access control assessment result based on the access policy assessment result and the access risk level, the process further includes: Update the subject trustworthiness in the stored subject attributes based on the subject's direct trust value.

5. An access control system for implementing the access control method as described in claim 1, characterized in that, include: The system comprises a strategy execution module, a strategy management module, a risk management module, and a strategy decision-making module. The policy enforcement module is used to obtain attribute-based access control requests; The policy management module is used to determine the access policy evaluation result based on the attribute-based access control request and the preset access policy; the access policy includes the correspondence between attribute information and the access policy evaluation result; The risk management module is used to determine the access risk level of the access control request based on the target feature information corresponding to the access control request; the target feature information includes at least one of the following: subject target trust value, historical access data, environmental attributes, and access request operation; The policy decision module is used to generate access control assessment results based on the access policy assessment results and access risk levels.

6. The access control system according to claim 5, characterized in that, It also includes at least one of the following: The module consists of three parts: the first module, the strategy information module, the history record management module, and the credibility management module. The first module is used to send a target access request to the policy execution module; The policy execution module is used to extract the subject identifier and / or object identifier from the target access request, and send the subject identifier and / or object identifier to the policy information module; The policy information module is used to obtain the target attribute corresponding to the target access request based on the subject identifier and / or object identifier; and send the target attribute to the policy execution module; the target attribute includes at least one of the following: subject attribute, object attribute, and environment attribute; The policy execution module is used to generate an attribute-based access control request based on the target attribute and / or the access request operation corresponding to the target access request, and send the attribute-based access control request to the policy decision module. The policy decision module is used to receive the attribute-based access control request and send it to the policy management module and the risk management module. The risk management module is used to receive the attribute-based access control request and send the attribute-based access control request to the history management module. The history management module is used to obtain historical access data based on the attribute-based access control request and send it to the risk management module; The historical access data is associated with at least one attribute corresponding to the attribute-based access control request; The risk management module is used to extract the subject credibility from the subject attributes corresponding to the attribute-based access control request, and send the subject credibility and subject historical access data to the credibility management module. The credibility management module is used to generate a target trust value for the subject based on the subject's credibility and historical access data, and then send it to the risk management module. The policy decision module is used to send the generated access control evaluation result to the policy execution module; The policy execution module is used to generate an access token based on the access control evaluation result and return it to the first module; the access token carries the access authorization result corresponding to the target access request; Alternatively, the policy execution module may be used to return the access control evaluation result and / or the object to the first module based on the access control evaluation result. The first module is used to perform access operations based on the access token or access control evaluation result.

7. The access control system according to claim 6, characterized in that, Also includes: The first module is used to generate the access history corresponding to the access control request and send it to the history management module after performing an access operation based on the access token or access control evaluation result. The history management module is used to generate access feedback results based on the access history corresponding to the access control request and send them to the trust management module; The access feedback result includes the access feedback result type and the access feedback result value; The trust management module is used to generate a direct trust value for the subject corresponding to the attribute-based access control request based on the access feedback result, and send the direct trust value of the subject to the policy information module. The policy information module is used to update the subject credibility in the stored subject attributes based on the subject's direct trust value.

8. An electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that, When the processor executes the computer program, it implements the access control method as described in any one of claims 1 to 4.

Images