Large-scale supplier dynamic evaluation system based on zero-trust architecture

Abstract

The invention relates to a large-scale supplier dynamic evaluation system based on a zero-trust architecture. The system comprises a client, a zero-trust control center and a database, the client is used for acquiring detailed information of a supplier and sending an access request containing the detailed information to the zero-trust control center; the zero-trust control center is used for judging whether the supplier logs in successfully or not according to the access request, acquiring detailed information and interacting with the database according to the detailed information; the database is used for providing corresponding detailed data for the zero-trust control center according to the detailed information; and the zero-trust control center is also used for determining the access authority of the supplier according to the detailed information and the detailed data after the supplier successfully logs in, and determining whether to authorize or not. According to the method, only authorized suppliers can access system resources, unified management and dynamic permission division of the suppliers are realized, the minimum permission principle is followed, the permissions of the suppliers are controlled, and the possibility of privacy data leakage is reduced.

Description

Technical Field

[0001] The present invention relates to the field of network security, and in particular to a large-scale supplier dynamic evaluation system based on a zero-trust architecture. Background Art

[0002] With the continuous advancement of information technology and the increasing complexity of network environments, traditional network security strategies are facing more and more challenges. Zero trust technology, as a new network security architecture, has received widespread attention in recent years. It fundamentally changes the design concept and implementation method of network security by redefining the trust model. In 2010, a research company first proposed the concept of zero trust architecture. Its core idea is "never trust, always verify", that is, whether the user or device is inside or outside the network, it should not be trusted by default, but needs to be ensured through continuous identity authentication and access control. A document re-examines the widely used integrated trust formation model (ITM), uses the integrated trust formation model in the context of zero trust and zero trust architecture, and proposes a new conceptual framework to help understand zero trust and zero trust architecture. Another document designs a trust management-based component that can be used in all zero trust frameworks. The component will dynamically provide access authorization based on the user's trustworthiness, device status, and contextual information. This adaptive approach aims to simplify access control while maintaining strong security. Implementing a zero trust architecture based on trust management can quickly adapt to the changing environment and make real-time trust adjustments based on the changing threat environment and user behavior.

[0003] The importance of supply chain management lies in that it can optimize the allocation of enterprise resources, reduce costs, improve efficiency, enhance competitiveness, and meet customer needs. By optimizing each link in the supply chain, unnecessary expenses can be reduced. Effective supply chain management enables enterprises to respond quickly to market changes and meet customers' personalized needs, thereby gaining an advantage in competition. The shortcomings of traditional supply chain management are very obvious. The slow speed of information transmission leads to the inability of various links in the supply chain to respond to market changes in a timely manner. The poor collaboration and information sharing between departments and links in the supply chain lead to low efficiency. The cost of manual operation and management is high, and it is easy to cause duplication of labor and waste of resources. Traditional network security usually relies on border protection, and some network border security devices provide network defense functions, such as firewalls and virtual private networks (VPNs). As long as the device or user enters the intranet with the permission of the border security device, it is considered to be credible. This method separates the network space into the intranet and the extranet, and believes that the intranet is safe and credible, while the extranet is full of threats. However, users or devices that pass through the border protection device may not be safe and credible. If the attacker successfully passes the authentication of the border protection device, his behavior in the internal network will no longer be subject to any restrictions, which will eventually lead to serious data security problems. In addition, in traditional architectures, supplier permission allocation is usually static, and role-based access control models are more common. This model lacks flexibility and is difficult to adjust according to the actual needs and dynamic changes of suppliers. Summary of the invention

[0004] In order to solve the above problems existing in the prior art, the present invention provides a large-scale supplier dynamic evaluation system based on a zero-trust architecture.

[0005] According to a first aspect of an embodiment of the present invention, there is provided a large-scale supplier dynamic evaluation system based on a zero-trust architecture, the system comprising: a client, a zero-trust control center, and a database;

[0006] The client is used to obtain detailed information of the supplier and send an access request containing the detailed information of the supplier to the zero trust control center;

[0007] The zero trust control center is used to determine whether the supplier has successfully logged in according to the access request, obtain detailed information of the supplier, and interact with the database according to the detailed information of the supplier;

[0008] The database is used to provide the zero trust control center with detailed data of the supplier according to the detailed information of the supplier;

[0009] The zero trust control center is also used to determine the access rights of the supplier based on the detailed information and detailed data of the supplier after the supplier successfully logs in, and determine whether to authorize the access request; wherein the access rights of the supplier are the minimum rights required to access system resources.

[0010] Optionally, the zero trust control center includes: a trust assessment module;

[0011] The trust evaluation module is used to obtain the current trust of the supplier by using a trust evaluation algorithm according to the detailed information and detailed data of the supplier after the supplier logs in successfully;

[0012] The trust evaluation module is further used to transmit the current trust level to the database to update the detailed data of the supplier.

[0013] Optionally, the zero trust control center further includes: an access control module;

[0014] The access control module is used to determine the access rights of the supplier according to a preset access control policy, the current trust level of the supplier and the access request.

[0015] Optionally, the zero-trust control center further includes: a risk warning module;

[0016] The risk warning module is used to monitor the supplier, the client, the zero trust control center and the database.

[0017] Optionally, the zero trust control center further includes: a policy execution point;

[0018] The policy enforcement point is used to determine whether to authorize the access request according to the access rights of the supplier.

[0019] Optionally, the client includes: a supplier client and an administrator client;

[0020] The supplier client is used to register the supplier according to the registration information of the supplier to perform identity authentication;

[0021] The administrator client is used to update and maintain the client, the zero trust control center and the database.

[0022] Optionally, the database includes: a historical information database, an identity information database, a behavior information database and an access log database;

[0023] The historical information database is used to store and manage the historical data of each supplier;

[0024] The identity information database is used to store the registration information of each supplier;

[0025] The behavior information database is used to store the behavior data of each supplier.

[0026] The technical solution provided by the present invention may include the following beneficial effects:

[0027] Through the above technical solution, a large-scale supplier dynamic evaluation system based on zero-trust architecture is proposed. The network architecture of the zero-trust control center is mainly used to replace the network boundary security equipment to ensure that only authorized suppliers can access system resources. It realizes the unified management and dynamic permission division of a large number of supplier users, follows the principle of least privilege, controls the permissions of suppliers, performs identity authentication through the client, database and zero-trust control center, eliminates the internal and external network security boundaries, realizes the unified management of suppliers, improves system efficiency, and reduces the possibility of privacy data leakage.

[0028] Other features and advantages of the present invention will be described in detail in the following detailed description. BRIEF DESCRIPTION OF THE DRAWINGS

[0029] The accompanying drawings are used to provide a further understanding of the present invention and constitute a part of the specification. Together with the following specific embodiments, they are used to explain the present invention but do not constitute a limitation of the present invention. In the accompanying drawings:

[0030] Figure 1 It is a schematic diagram of a large-scale supplier dynamic evaluation system architecture based on a zero-trust architecture according to an exemplary embodiment.

[0031] Figure 2 The figure is a schematic diagram showing the structure of a trust evaluation module according to an exemplary embodiment.

[0032] Figure 3 The figure is a schematic diagram of a system operation flow according to an exemplary embodiment.

[0033] Figure 4 It is a schematic diagram of the structure of an access control module according to an exemplary embodiment.

[0034] Figure 5 It is a schematic diagram of an operation flow of an access control module according to an exemplary embodiment.

[0035] Figure 6 It is a structural diagram of a risk warning module according to an exemplary embodiment.

[0036] Figure 7 It is a structural diagram of yet another risk warning module according to an exemplary embodiment.

[0037] Figure 8 The present invention is a flowchart of a system monitoring method according to an exemplary embodiment.

[0038] Fig. 9 The present invention is a flowchart of supplier monitoring according to an exemplary embodiment.

[0039] Fig.10 The figure is a flow chart showing a supplier registration process according to an exemplary embodiment. DETAILED DESCRIPTION

[0040] Figure 1 is a schematic diagram of a large-scale supplier dynamic evaluation system architecture based on a zero-trust architecture according to an exemplary embodiment. Figure 1 As shown, the system includes: a client, a zero trust control center and a database;

[0041] The client is used to obtain detailed information of the supplier and send an access request containing the detailed information of the supplier to the zero trust control center;

[0042] Zero Trust Control Center, which is used to determine whether the supplier has logged in successfully based on the access request, obtain detailed information about the supplier, and interact with the database based on the supplier's detailed information;

[0043] A database, used to provide detailed data of the supplier to the zero trust control center based on the detailed information of the supplier;

[0044] The Zero Trust Control Center is also used to determine the supplier's access rights based on the supplier's detailed information and data after the supplier successfully logs in, and to determine whether to authorize the access request; among which, the supplier's access rights are the minimum rights required to access system resources.

[0045] Optionally, the zero trust control center includes: a trust assessment module;

[0046] The trust evaluation module is used to obtain the current trust level of the supplier using the trust evaluation algorithm based on the supplier's detailed information and data after the supplier successfully logs in;

[0047] The trust evaluation module is also used to transmit the current trust level to the database to update the supplier's detailed data.

[0048] It is understandable that the zero trust control center can be on the server side. Figure 2 is a schematic diagram of a trust evaluation module according to an exemplary embodiment. Figure 2As shown in the figure, the function of the trust assessment module is to obtain the current trust of the supplier, and use the supplier's detailed data such as price, quality, average qualified rate, total qualified rate, delivery time and quantity, cooperation, historical transaction information, historical access information, etc. as parameters, combined with the supplier's detailed information such as user name, password, system and network information, etc., to calculate the current trust of the supplier through the trust assessment algorithm. The evaluation result will be used as one of the basis for the next access control, and will also be used as historical access information to affect the trust assessment of the supplier when he accesses the system again. This module continuously evaluates the risk level of each supplier. The evaluation factors include the supplier's historical performance, security incident records, compliance status, access frequency and behavior patterns. Suppliers with higher risks may be subject to more restrictions. Through continuous trust assessment of suppliers, this module helps protect the integrity of the supply chain and prevent unauthorized suppliers or suppliers that do not meet the standards from entering the supply chain system, thereby reducing supply chain risks.

[0049] For example, the current trust of the supplier can be normalized, and the processed trust is in the same range, that is, between 0 and 1, so that the trust from different sources and at different times can be directly compared, and it also provides convenience for the subsequent access control module to set the permission level. The result calculated by the trust evaluation algorithm used in the present invention is also normalized. The user's historical trust is V H , the current trust is V N , the trust value obtained according to the identity authentication method and the authentication result is V C If the authentication fails, V C The value is 0.

[0050] In one embodiment, Figure 3 is a schematic diagram of a system operation flow chart according to an exemplary embodiment. Figure 3 As shown, the process is as follows:

[0051] (1) The supplier enters the user name, password, electronic key Ukey and personal identification code PIN code information in the supplier client to log in for identity authentication. The supplier client obtains the supplier's detailed information, which may include the supplier's network information and device information, and sends the access request and detailed information to the zero trust control center;

[0052] (2) After receiving the access request, the Zero Trust Control Center starts to perform mandatory identity authentication on the access request, verifies the signature of the electronic key Ukey and the personal identification code PIN in the supplier's detailed information, checks whether the two correspond, retrieves the corresponding password hash value Password_Hashed from the database based on the supplier's user name User_id, and determines whether the supplier's login is successful based on the authentication protocol;

[0053] (3) If the login information is correct, indicating that the supplier has successfully logged in, a trust evaluation is performed based on the supplier's access request. Based on the supplier's login information Login_Info, the supplier's historical trustworthiness is retrieved from the historical information database of the database, and detailed data such as the supplier's price, quality, average qualified rate, total qualified rate, delivery date and quantity, coordination, and historical trust value are retrieved from the instantly updated supplier database. The detailed information and data are used as inputs to the trust evaluation algorithm to obtain the supplier's current trustworthiness, which is then input into the access control module.

[0054] (4) The zero trust control center returns the supplier’s current trust and authentication results to the client, and updates the trust in the supplier’s historical information in the database.

[0055] (5) The client receives the authentication result from the server to authenticate the system and returns the result to the zero-trust control center to complete two-way authentication.

[0056] Optionally, the zero trust control center further includes: an access control module;

[0057] The access control module is used to determine the access rights of the supplier according to the preset access control policy, the current trust level of the supplier and the access request.

[0058] Understandably, Figure 4 is a schematic diagram of the structure of an access control module according to an exemplary embodiment. Figure 4 As shown in the figure, the access control module implements fine-grained access control policies, and different suppliers obtain different access rights according to their roles and needs. The supplier's access rights to the system are based on the results of the trust assessment module. Combined with the actual access requests of the supplier client and the access control policy, the supplier client's access request is dynamically determined, and the system can flexibly respond to various security threats and changing access requirements. The access control module ensures that only suppliers that meet security standards and requirements can access the system, thereby protecting the integrity and security of the supply chain and preventing potential security risks and business interruptions. The access control module is responsible for defining and managing access control policies, which can be dynamically adjusted according to security requirements, supplier roles and access requests to ensure the consistency and effectiveness of the policies.

[0059] In one embodiment, Figure 5 is a schematic diagram of an operation flow of an access control module according to an exemplary embodiment. Figure 5 As shown, the process is as follows:

[0060] (1) The access control module determines the control strategy for the current access based on the preset access control strategy, combined with the supplier's current trust and access request. The access control strategy establishes the correspondence between trust and resource level. The trust interval is 0 to 1, and the interval is divided into three levels with 0, 0.4, and 0.7 as boundaries, corresponding to low, medium, and high trust respectively. According to the access control strategy, low-trust suppliers can be reminded and warned. When they request to access resources higher than their own trust level, they can be reminded and required to improve their own business conditions and network security environment, and take additional manual measures; for medium-trust suppliers, only reminders are given when they want to access resources higher than their own trust level, and no intervention is made on the access of high-trust suppliers. The strategy can be expanded and modified on this basis in different application scenarios to enhance the versatility and scalability of the system.

[0061] (2) The access request sent by the supplier client to the zero trust control center contains information about the resources that the supplier currently wants to access. The access control module receives this information and performs comparative calculations based on the current access control policy to confirm the minimum permissions that the supplier can obtain based on his or her current trust level. The module then adjusts the supplier's permissions based on the additional information in the access control policy.

[0062] (3) The access control engine determines the minimum permissions that the current supplier can obtain based on the access request and the current trust level according to the access control policy, and transfers the information for execution. At the same time, the access control information is updated in the database.

[0063] (4) The supplier client obtains the final authority and enters the system.

[0064] Optionally, the zero trust control center further includes: a risk warning module;

[0065] Risk warning module for monitoring suppliers, clients, zero-trust control centers, and databases.

[0066] Understandably, Figure 6 is a schematic diagram of a structure of a risk warning module according to an exemplary embodiment. Figure 7 is a schematic diagram of the structure of another risk warning module according to an exemplary embodiment. Figure 6 and Figure 7 As shown, Figure 6 This is the system monitoring framework diagram. Figure 7This is a diagram of the supplier monitoring framework. By real-time monitoring and detecting potential risks, the security and stability of the supply chain and system are guaranteed. The risk warning module continuously monitors the internal activities of the system, user behavior, device status and requests, etc., and promptly detects abnormal situations or potential threats to ensure that system resources are in a protected state. At the same time, by monitoring the activities and security status of suppliers, potential supply chain risks can be identified and warned in a timely manner to ensure the stability and security of the supply chain. This real-time monitoring can quickly detect risks and reduce response time.

[0067] In one embodiment, Figure 8 is a schematic diagram of a system monitoring process according to an exemplary embodiment. Figure 8 As shown, the process is as follows:

[0068] (1) The supplier obtains permission through login authentication and trust assessment, and begins to access the system and perform operations.

[0069] (2) Record the supplier's behavior and operations within the system through the supplier client, including the supplier's click behavior, input behavior, download and upload behavior within the system. If no operation is performed internally, the detailed information such as the page stayed and the stay time will be recorded at regular intervals. At the same time, the client's equipment, network and system information will be monitored to form a comprehensive behavior log record;

[0070] (3) Perform behavioral analysis on the generated log records, make decisions on the supplier's current access based on the pre-set system monitoring strategy, and issue decision instructions to the policy execution point;

[0071] (4) The policy execution point, based on the instructions, performs non-intervention, reminder, or intervention operations on the supplier access within the system, and records the response information.

[0072] In one embodiment, Fig. 9 is a flow chart showing a supplier monitoring process according to an exemplary embodiment. Fig. 9 As shown, the process is as follows:

[0073] (1) Update detailed information of suppliers through the database, including supplier product information, supplier business status, etc.;

[0074] (2) Supplier monitoring: By updating the supplier's unique identity User_id, the supplier's equipment quality, average qualified rate, total qualified rate, delivery time and quantity, cooperation degree, historical transactions and other information are retrieved from the database to analyze the supplier's data and information;

[0075] (3) The data analysis module draws a conclusion on the comprehensive situation of the current supplier based on the supplier management and control strategy, and automatically performs subsequent operations or reports to humans, who then intervene in the monitoring;

[0076] (4) The database will record the information of the monitored supplier.

[0077] Optionally, the zero trust control center also includes: a policy enforcement point;

[0078] A policy enforcement point that determines whether to authorize an access request based on the provider's access rights.

[0079] It is understandable that the policy enforcement point is a key component for implementing access control decisions. The function of the policy enforcement point is to execute the authorization of access requests based on the final decision of the access control module. The access control module makes the final decision to allow, deny or restrict user and client access to resources based on the user's trust, the resources requested for access, and the response strategy to the current trust. Each access request must be authorized by the policy enforcement point before reaching the target resource. The policy enforcement point is able to apply security policies in real time. For example, based on real-time risk warnings and behavior monitoring, the policy enforcement point can immediately adjust access rights, add verification steps, or isolate suspicious activities. As a basic component of the zero trust architecture, the policy enforcement point implements strict control over each access request to ensure that the network is always protected.

[0080] Optionally, the client includes: a supplier client and an administrator client;

[0081] The supplier client is used to register the supplier according to the supplier's registration information for identity authentication;

[0082] Administrator client, used to update and maintain clients, the Zero Trust Control Center, and the database.

[0083] Understandably, Fig.10 FIG. 1 is a flow chart showing a supplier registration process according to an exemplary embodiment. Fig.10As shown, all suppliers who need to access the system need to register in the supplier client to obtain a unique legal identity. After submitting their own detailed information and legal supplier qualifications, the supplier obtains the electronic key Ukey and personal identification code PIN for identity authentication. Suppliers who have passed the review can perform multi-factor authentication in the system front-end login authentication page to enter the system. The permissions assigned by the system are determined according to the actual situation of the supplier. Suppliers with different operating conditions have different permissions in the system. Suppliers with poor operating conditions have lower permissions in the system and may even receive prompts and warnings from the system; suppliers with better operating conditions will have higher permissions in the system. Therefore, if suppliers want to obtain higher permissions, they must improve their own operating conditions and have a good record of behavior in the system.

[0084] It is worth mentioning that the client also includes the administrator client, which also provides an interface for managing the entire system. The administrator can update and maintain the system through the administrator client, such as updating access control rules, updating data protection measures, and manually handling security incidents. Bidders for bidding projects can submit their bidding information through the administrator client and manage the follow-up work of the bidding process. If the administrator wants to log in and authenticate through the administrator client, he needs to pass more stringent authentication standards. Only users with higher authority identities under specific network, device, and system conditions can enter the system through the administrator client.

[0085] Optionally, the database includes: a historical information database, an identity information database, a behavior information database and an access log database;

[0086] Historical information database, used to store and manage historical data of each supplier;

[0087] An identity information database, which is used to store the registration information of each supplier;

[0088] The behavior information database is used to store the behavior data of each supplier.

[0089] It is understandable that in addition to system resources, the database part sets up four databases for historical information, identity information, behavior information, and access log information. These databases not only act on their respective functional modules, but also provide important information for activities such as security audits, compliance checks, data analysis and reporting. The historical information database stores a large amount of historical data related to suppliers, including transaction records, contract information, trust evaluation results, etc. These data provide a rich information basis for the management and evaluation of suppliers. By analyzing historical transaction records, performance and quality issues, the reliability and cooperation value of suppliers can be judged, so as to make more informed supplier selection and management decisions. Store multi-factor authentication information of suppliers and their representatives, such as mobile phone numbers, email addresses, authentication devices, etc. Multi-factor authentication relies on this information to provide an additional layer of security verification and improve the security of the system. The identity information database provides a centralized platform for managing and maintaining the identity information of suppliers. Through regular updates and audits, all supplier information is ensured to be accurate and up-to-date, reducing management workload and improving efficiency. The identity information database not only stores current identity information, but also saves historical information for auditing and tracing. These historical records help understand the identity changes and activity trajectories of suppliers and users, and support long-term security and management decisions. The behavior information database records all activities of the supplier in the system in detail. By continuously monitoring and analyzing behavior information, the database can help identify abnormal activities and potential security threats. For example, abnormal access patterns, large data downloads, or frequent failed login attempts will be marked as suspicious behavior and trigger security alerts. The historical behavior data stored in the behavior information database is used to assess the risk level of the supplier. Based on the supplier's behavior patterns and past security incidents, the system can dynamically adjust the supplier's risk score to determine whether additional verification measures are required or their access rights are restricted. In the event of a security incident, the behavior information database provides detailed behavior records to support rapid investigation and response to the incident. The security team can trace the process of the incident through the behavior records, identify the responsible party, and take appropriate measures. The access log database records all access activities of the supplier and its users in the system in detail, including login time, logout time, resources accessed, operations performed, IP addresses, etc. These logs provide a comprehensive record of activities and provide basic data for subsequent analysis and auditing. Access logs can provide analytical basis for activities such as auditing and security incident investigation.

[0090] Through the above technical solution, all supplier users use the authentication method that combines security equipment with user information. All suppliers conduct trust assessments at every visit, eliminating the pre-set trust level. The access rights of suppliers are divided according to their real-time trust values ​​to ensure that only users who have passed the authentication and have qualified trust have permissions. All permissions are granted according to the minimum permission standard, effectively limiting the lateral movement behavior within the system. According to multi-dimensional information, the calculation of the comprehensive trust and risk level of suppliers is realized, and the evaluation ability is more comprehensive and comprehensive. The actual performance of suppliers is more effective to ensure the security of the supply chain. Based on the idea of ​​"never trust, continuous authentication" of zero trust, all access requests are authenticated, and multi-dimensional information is used to evaluate users. Therefore, the designed zero trust architecture can be applied to other application scenarios, and the system has strong scalability. The risk warning module is designed to replace manual monitoring, and the policy execution point automatically executes operations according to the policy, which reduces the workload of the manual management system, improves the automation of supplier management, and effectively improves the operating efficiency of the supplier management system.

[0091] The preferred embodiments of the present invention are described in detail above in conjunction with the accompanying drawings. However, the present invention is not limited to the specific details in the above embodiments. Within the technical concept of the present invention, a variety of simple modifications can be made to the technical solution of the present invention, and these simple modifications all belong to the protection scope of the present invention.

[0092] It should also be noted that the various specific technical features described in the above specific embodiments can be combined in any suitable manner without contradiction. In order to avoid unnecessary repetition, the present invention will not further explain various possible combinations.

[0093] In addition, various embodiments of the present invention may be arbitrarily combined, and as long as they do not violate the concept of the present invention, they should also be regarded as the contents disclosed by the present invention.

Claims

1. A large-scale supplier dynamic evaluation system based on zero trust architecture, characterized in that: The system includes: a client, a zero-trust control center, and a database; The client is used to obtain detailed information of the supplier and send an access request containing the detailed information of the supplier to the zero trust control center; The zero trust control center is used to determine whether the supplier has successfully logged in according to the access request, obtain detailed information of the supplier, and interact with the database according to the detailed information of the supplier; The database is used to provide the zero trust control center with detailed data of the supplier according to the detailed information of the supplier; The zero trust control center is also used to determine the access rights of the supplier based on the detailed information and detailed data of the supplier after the supplier successfully logs in, and determine whether to authorize the access request; wherein the access rights of the supplier are the minimum rights required to access system resources.

2. The large-scale supplier dynamic evaluation system based on zero trust architecture according to claim 1 is characterized in that: The zero trust control center includes: a trust assessment module; The trust evaluation module is used to obtain the current trust of the supplier by using a trust evaluation algorithm according to the detailed information and detailed data of the supplier after the supplier logs in successfully; The trust evaluation module is further used to transmit the current trust level to the database to update the detailed data of the supplier.

3. The large-scale supplier dynamic evaluation system based on zero trust architecture according to claim 2 is characterized in that: The zero trust control center also includes: an access control module; The access control module is used to determine the access rights of the supplier according to a preset access control policy, the current trust level of the supplier and the access request.

4. The large-scale supplier dynamic evaluation system based on zero trust architecture according to claim 1 is characterized in that: The zero trust control center also includes: a risk warning module; The risk warning module is used to monitor the supplier, the client, the zero trust control center and the database.

5. The large-scale supplier dynamic evaluation system based on zero trust architecture according to claim 1 is characterized in that: The zero trust control center also includes: a policy execution point; The policy enforcement point is used to determine whether to authorize the access request according to the access rights of the supplier.

6. The large-scale supplier dynamic evaluation system based on zero trust architecture according to claim 1 is characterized in that: The client includes: a supplier client and an administrator client; The supplier client is used to register the supplier according to the registration information of the supplier to perform identity authentication; The administrator client is used to update and maintain the client, the zero trust control center and the database.

7. The large-scale supplier dynamic evaluation system based on zero trust architecture according to claim 6 is characterized in that: The database includes: a historical information database, an identity information database, a behavior information database and an access log database; The historical information database is used to store and manage the historical data of each supplier; The identity information database is used to store the registration information of each supplier; The behavior information database is used to store the behavior data of each supplier.

Images