Terminal access authority analysis method and system based on zero-trust ABAC model

Abstract

The invention discloses a terminal access permission analysis method and system based on a zero-trust ABAC model. The method comprises the steps that a user terminal sends a resource access request; the PEP receives a resource access request sent by the user terminal; the method comprises the following steps: extracting a multi-dimensional attribute from a user request according to a preset acquisition requirement based on the user request, converting the user request into an attribute request, and sending the attribute request to a policy decision point PDP; the attributes comprise a user attribute, an environment attribute, an operation attribute and an object attribute; the PDP performs access permission analysis by using a policy management point (PAP) based on the attribute request, obtains an access permission analysis result and feeds back the access permission analysis result to the PEP, and information fed back by the PDP to the PEP comprises permission, rejection, inapplicability and unknown; and the PEP permits or prohibits the resource access request according to the feedback information received from the PDP. According to the invention, on the basis of a zero-trust technical framework, fine management of authority is realized through the ABAC, and continuously changing business requirements and security challenges are effectively coped with.