Access method of information system

Abstract

The invention relates to the technical field of data interaction, in particular to an access method of an information system. The method comprises the following steps: acquiring system access user data, extracting access device data, and constructing an identity device identification block chain; and identifying a new access device through the access device data, converting the new access device into an identifier, and performing dynamic identifier conversion on the identity device identification block chain to obtain a dynamic device access identifier. And performing dynamic user access identification on the user data, and performing new equipment analysis on the user data and the dynamic equipment access identifier to obtain equipment information system access data and a new equipment authentication sequence. And converting the dynamic device access identifier into an identifier authentication sequence, carrying out cross-device access processing on a new device authentication sequence based on the identifier authentication sequence, and finally combining same-device and cross-device access data to generate an information system access scheme. Through the dynamic identification conversion technology, the access security of the information system is enhanced, and the cross-device access security is improved.

Description

Technical Field

[0001] The present invention relates to the technical field of data interaction, and in particular to an access method of an information system. Background Art

[0002] Current technologies usually use centralized identity management systems and use traditional databases to store user and device information. Traditional methods usually use a centralized architecture and use a database to store user and device information, which makes system design and implementation relatively simple, especially for small or closed systems. Centralized systems provide centralized control and management, making it easy for administrators to manage and monitor user access. Administrators can easily add, delete or modify user permissions and centrally manage security policies for the entire system. However, there are shortcomings in terms of security and flexibility. For example, when a large number of devices access at the same time, it will cause the centralized system to be overloaded and affect the response speed. In addition, if the central database is hacked or destroyed, the security of the entire system will be seriously affected. Existing technologies usually lack dynamic identity conversion capabilities and cannot update device identities in real time, which limits their ability to adapt to rapidly changing environments. Although some systems have implemented cross-device access control, they lack effective responses to device authentication failures or hacking. Summary of the invention

[0003] Based on this, it is necessary to provide an information system access method to solve at least one of the above technical problems.

[0004] To achieve the above object, a method for accessing an information system is provided, the method comprising the following steps:

[0005] Step S1: Obtain system access user data; extract access device data from the system access user data to obtain access device data; construct an identification blockchain based on the system access user data and the access device data to obtain an identity device identification blockchain;

[0006] Step S2: Identify the new access device according to the access device data to obtain the new access device data; perform identifier conversion on the new access device data to obtain the new device identifier; perform new device block conversion on the new access device data to obtain the new device block data; perform dynamic identifier conversion on the identity device identification blockchain according to the new device block data to obtain the dynamic device access identifier;

[0007] Step S3: Perform dynamic user access identification on the system access user data to obtain user access identification data; perform new device analysis on the dynamic device access identifier based on the user access identification data to obtain device information system access data and new device authentication sequence;

[0008] Step S4: Perform authentication data conversion on the dynamic device access identifier to obtain an identification authentication sequence; perform information system cross-device access processing on the new device authentication sequence based on the identification authentication sequence to obtain cross-device information system access data; perform information system access based on the same-device information system access data and cross-device information system access data to obtain an information system access plan.

[0009] The present invention acquires user and device data, constructs an identity device identification blockchain, and realizes decentralized storage and management of identity and device information. By utilizing the immutability of the blockchain, identity forgery and data tampering can be effectively prevented, system security can be improved, and the risk of central database being invaded or destroyed can be solved. The new access device is identified, the identifier is converted, and the block is converted, and the dynamic identifier conversion is performed in combination with the identity device identification blockchain to generate a dynamic device access identifier. This realizes the dynamic update of the device identity, enhances the system's adaptability to a rapidly changing environment, and makes up for the defect of the prior art lacking dynamic identifier conversion capability. The user is dynamically accessed and identified, and the new device is analyzed in combination with the dynamic device access identifier to generate device information system access data and new device authentication series. This realizes dual authentication of users and devices, further improves the security of access, and provides basic data for subsequent cross-device access control. The dynamic device access identifier is converted into an identification authentication series, and cross-device access processing is performed in combination with the new device authentication series, and finally an information system access plan is generated. This realizes refined cross-device access control, which can effectively deal with the situation where device authentication fails or is invaded, and solves the problem of excessive load on the centralized system when a large number of devices are accessed at the same time. This method provides a secure, flexible, and efficient access control mechanism, which is particularly suitable for environments with widespread IoT and mobile devices. It solves the problems of overloaded centralized systems, single security, lack of dynamic updates, and cross-device access control, while introducing a zero-trust mechanism to ensure the security and reliability of the system. BRIEF DESCRIPTION OF THE DRAWINGS

[0010] Figure 1 A flowchart of steps of a method for accessing an information system;

[0011] Figure 2 for Figure 1 Detailed implementation steps of step S2 in the flowchart;

[0012] Figure 3 for Figure 2 Detailed implementation steps of step S25 are shown in the flowchart.

[0013] The realization of the purpose, functional features and advantages of the present invention will be further explained in conjunction with embodiments and with reference to the accompanying drawings. DETAILED DESCRIPTION

[0014] The technical method of the present invention is described clearly and completely below in conjunction with the accompanying drawings. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by technicians in this field without creative work are within the scope of protection of the present invention.

[0015] In addition, the accompanying drawings are only schematic illustrations of the present invention and are not necessarily drawn to scale. The same reference numerals in the figures represent the same or similar parts, and their repeated description will be omitted. Some of the block diagrams shown in the accompanying drawings are functional entities and do not necessarily correspond to physically or logically independent entities. The functional entities can be implemented in software form, or implemented in one or more hardware modules or integrated circuits, or implemented in different networks and / or processor methods and / or microcontroller methods.

[0016] It should be understood that, although the terms "first", "second", etc. may be used herein to describe various units, these units should not be limited by these terms. These terms are used only to distinguish one unit from another unit. For example, without departing from the scope of the exemplary embodiments, the first unit may be referred to as the second unit, and similarly the second unit may be referred to as the first unit. The term "and / or" used herein includes any and all combinations of one or more of the listed associated items.

[0017] To achieve this, please refer to Figures 1 to 3 , a method for accessing an information system, the method comprising the following steps:

[0018] Step S1: Obtain system access user data; extract access device data from the system access user data to obtain access device data; construct an identification blockchain based on the system access user data and the access device data to obtain an identity device identification blockchain;

[0019] Step S2: Identify the new access device according to the access device data to obtain the new access device data; perform identifier conversion on the new access device data to obtain the new device identifier; perform new device block conversion on the new access device data to obtain the new device block data; perform dynamic identifier conversion on the identity device identification blockchain according to the new device block data to obtain the dynamic device access identifier;

[0020] Step S3: Perform dynamic user access identification on the system access user data to obtain user access identification data; perform new device analysis on the dynamic device access identifier based on the user access identification data to obtain device information system access data and new device authentication sequence;

[0021] Step S4: Perform authentication data conversion on the dynamic device access identifier to obtain an identification authentication sequence; perform information system cross-device access processing on the new device authentication sequence based on the identification authentication sequence to obtain cross-device information system access data; perform information system access based on the same-device information system access data and cross-device information system access data to obtain an information system access plan.

[0022] In the embodiment of the present invention, please refer to Figure 1 FIG. 1 is a flow chart of steps of a method for accessing an information system according to the present invention. In this example, the method for accessing an information system includes the following steps:

[0023] Step S1: Obtain system access user data; extract access device data from the system access user data to obtain access device data; construct an identification blockchain based on the system access user data and the access device data to obtain an identity device identification blockchain;

[0024] In an embodiment of the present invention, user access data is obtained through the system, including user information such as user name, password, IP address, access time, and database information such as user ID, user group, access rights, etc., and access device data such as device type, operating system, browser version, MAC address, IP address, etc. are extracted, and an access device identifier is generated using a hash algorithm. The user data is associated with the identifier to generate access device associated data, and finally the associated data and the identifier are packaged into a new block containing user information, access time, device information, identifier and the hash value of the previous block to form an identity device identification blockchain.

[0025] Step S2: Identify the new access device according to the access device data to obtain the new access device data; perform identifier conversion on the new access device data to obtain the new device identifier; perform new device block conversion on the new access device data to obtain the new device block data; perform dynamic identifier conversion on the identity device identification blockchain according to the new device block data to obtain the dynamic device access identifier;

[0026] In an embodiment of the present invention, the system identifies a new access device based on access device data and generates a new device identifier using a hash algorithm; then, based on the new access device data, the associated user identity information is searched in the identity device identification blockchain to obtain an access identity unit, and based on the access identity unit, the new device access block is located, and the new device identifier is compared and verified with the device identifier in the block, and the block data is extracted to obtain the new device block data; then, based on the new access device data, a time-sequential weakening weight is generated for the new device block data to obtain the new device time-sequential weakening weight data; finally, a dynamic device access identifier is generated based on the new device block data, the new device time-sequential weakening weight data, the access identity unit and other information.

[0027] Step S3: Perform dynamic user access identification on the system access user data to obtain user access identification data; perform new device analysis on the dynamic device access identifier based on the user access identification data to obtain device information system access data and new device authentication sequence;

[0028] In an embodiment of the present invention, a system performs dynamic user access identification on user access data to obtain user access identification data, and based on this data, user identity information is extracted from a dynamic device access identifier to obtain a dynamic user access identifier; then the dynamic user access identifier is compared with the dynamic device access identifier to obtain new device identification comparison data including identification comparison identical data and identification comparison difference data; finally, based on the comparison result, if the identification comparison is identical data, information system access processing is performed to obtain the same device information system access data; if the identification comparison is different data, new device authentication processing is performed to obtain a new device authentication sequence.

[0029] Step S4: Perform authentication data conversion on the dynamic device access identifier to obtain an identification authentication sequence; perform information system cross-device access processing on the new device authentication sequence based on the identification authentication sequence to obtain cross-device information system access data; perform information system access based on the same-device information system access data and cross-device information system access data to obtain an information system access plan.

[0030] In an embodiment of the present invention, the dynamic device access identifier is converted into authentication data by the system to obtain an identification authentication sequence, and compared with the new device authentication sequence to obtain new device sequence authentication data containing authentication sequence comparison identical data and authentication sequence comparison difference data; if the comparison result is authentication sequence comparison identical data, information system access processing is performed to obtain cross-device information system access data; if the comparison result is authentication sequence comparison difference data, device zero-trust identification processing is performed on the new device authentication sequence to obtain a device zero-trust identification; finally, an information system access plan is formulated based on the same-device information system access data and the cross-device information system access data.

[0031] The present invention acquires user and device data, constructs an identity device identification blockchain, and realizes decentralized storage and management of identity and device information. By utilizing the immutability of the blockchain, identity forgery and data tampering can be effectively prevented, system security can be improved, and the risk of central database being invaded or destroyed can be solved. The new access device is identified, the identifier is converted, and the block is converted, and the dynamic identifier conversion is performed in combination with the identity device identification blockchain to generate a dynamic device access identifier. This realizes the dynamic update of the device identity, enhances the system's adaptability to a rapidly changing environment, and makes up for the defect of the prior art lacking dynamic identifier conversion capability. The user is dynamically accessed and identified, and the new device is analyzed in combination with the dynamic device access identifier to generate device information system access data and new device authentication series. This realizes dual authentication of users and devices, further improves the security of access, and provides basic data for subsequent cross-device access control. The dynamic device access identifier is converted into an identification authentication series, and cross-device access processing is performed in combination with the new device authentication series, and finally an information system access plan is generated. This realizes refined cross-device access control, which can effectively deal with the situation where device authentication fails or is invaded, and solves the problem of excessive load on the centralized system when a large number of devices are accessed at the same time. This method provides a secure, flexible, and efficient access control mechanism, which is particularly suitable for environments with widespread IoT and mobile devices. It solves the problems of overloaded centralized systems, single security, lack of dynamic updates, and cross-device access control, while introducing a zero-trust mechanism to ensure the security and reliability of the system.

[0032] Preferably, step S1 comprises the following steps:

[0033] Step S11: Obtaining system access user data;

[0034] In an embodiment of the present invention, when a user attempts to access the system, the system will collect the identity information provided by the user through the user login interface, such as the user name and password. At the same time, the system will also record the user's IP address, access time and other information. In addition, the system can read other relevant information of the user from the existing user database, such as user ID, user group, access rights, etc. The system will verify the user name and password submitted by the user to ensure the legitimacy of the user's identity. After the verification is passed, the system will store the collected user information in a temporary variable for use in subsequent steps.

[0035] Step S12: extracting access device data from system access user data to obtain access device data;

[0036] In the embodiment of the present invention, the access device data is extracted from the system access user data to obtain the access device data: the system analyzes the User-Agent field in the user access request to extract the device type, operating system version, browser version and other information. At the same time, the system also analyzes the network data packet to extract the device's MAC address, IP address and other network information. If the user uses a mobile device, the system can also try to obtain the device's unique identifiers such as IMEI number, IMSI number, etc.

[0037] Step S13: generating an identifier according to the access device data to obtain an access device identifier;

[0038] In the embodiment of the present invention, the access device identifier is obtained by generating an identifier based on the access device data: the system uses a hash algorithm, such as SHA-256, to perform hash calculation on the extracted device feature data to generate a hash value of a fixed length as the access device identifier. In order to ensure the uniqueness of the identifier, the system will compare the generated identifier with the existing identifier database. If a duplicate is found, the identifier will be regenerated until a unique identifier is generated.

[0039] Step S14: performing data association on the system access user data based on the access device identifier to obtain access device association data;

[0040] In the embodiment of the present invention, the system associates the acquired system access user data with the generated access device identifier to generate access device associated data. The associated data can be stored in a temporary data structure, such as a dictionary or a table, in which the key-value pairs are user identity information and access device identifier. These associated data include user identity, access time, device information, etc.

[0041] Step S15: Perform block mapping based on the access device association data and the access device identifier to obtain the identity device identification blockchain.

[0042] In the embodiment of the present invention, the identity device identification blockchain is obtained by performing block mapping according to the access device association data and the access device identifier: the system packages the generated access device association data and the access device identifier into a new block. The block contains user identity information, access time, device information, access device identifier and the hash value of the previous block.

[0043] The present invention obtains system access user data and extracts access device data, so that the system can establish an association between the user and the device. This is an important data collection process, which ensures accurate identity authentication and access control in subsequent steps. By analyzing user access behavior and device characteristics, the user identity and device status can be more accurately identified. An access device identifier is generated based on the access device data, and a unique identifier is assigned to each access device. This allows the system to distinguish different access devices, even if the same user uses different devices for access. The generation of the access device identifier can use technologies such as hash algorithms to ensure the uniqueness and security of the identifier. The system access user data and access device data are associated with the access device identifier to generate access device association data. This establishes a clear correspondence between the user and the device, providing a data basis for subsequent block mapping operations. By associating user data and device data, the user's access behavior and the use of the device can be more fully understood. Finally, an identity device identification blockchain is formed. This utilizes the decentralized and tamper-proof characteristics of the blockchain, ensures the security of identity and device information, prevents data from being tampered with or forged, and realizes trusted identity device identification management. It forms a powerful authentication and access control framework. By combining device data and user data, the system can make more accurate and secure access control decisions while ensuring decentralized and secure user identity management.

[0044] Preferably, step S13 comprises the following steps:

[0045] Step S131: extracting characteristic data according to access device data to obtain device characteristic data;

[0046] In an embodiment of the present invention, various device feature information is extracted from the access device data by the system, such as operating system type, operating system version number, browser type, browser version number, device model, CPU architecture, screen resolution, language setting, plug-in information, time zone, etc.

[0047] Step S132: performing a hash algorithm conversion on the device feature data to obtain an initial device feature identifier; performing identifier deduplication on the initial device feature identifier to obtain a device feature identifier;

[0048] In an embodiment of the present invention, the system uses a hash algorithm to perform a hash calculation on the device feature data. After the structured device feature data is serialized into a string, it is used as the input of the hash algorithm to obtain a hash value of a fixed length, i.e., the initial device feature identifier. Subsequently, the system will query the database to see whether the initial identifier exists. If it exists, it means that the device has accessed the system before, and the system will directly use the existing device feature identifier; if it does not exist, the initial identifier will be stored in the database as the device feature identifier and associated with the current access.

[0049] Step S133: performing access data analysis according to the access device data to obtain access data, wherein the access data includes access timestamp data and access geographic location data;

[0050] In the embodiment of the present invention, the system extracts access timestamp data from the access device data, accurate to milliseconds. At the same time, the system attempts to obtain the user's geolocation information. When the user authorizes the location access permission, the system can obtain the user's latitude and longitude coordinates through the browser API or IP address positioning.

[0051] Step S134: converting the access timestamp data and the access geographic location data into an access system identifier to obtain an access user identifier;

[0052] In the embodiment of the present invention, the access user identifier is obtained by converting the access timestamp data and the access geolocation data into an access system identifier: the system combines the access timestamp and the geolocation data into a string, such as "timestamp-longitude-latitude". Then, the string is hashed using a hash algorithm to obtain a fixed-length hash value as the access user identifier.

[0053] Step S135: Correspondingly associate the device feature identifier and the access user identifier to obtain the access device identifier.

[0054] In the embodiment of the present invention, the system associates the obtained device feature identifier with the obtained access user identifier to generate a final access device identifier. The association method can be a simple string concatenation, such as "device feature identifier-access user identifier", or the two can be hashed again to generate a new hash value as the final access device identifier.

[0055] The present invention extracts device feature data, such as device model, operating system version, browser type, IP address, etc., from access device data. The purpose of extracting these feature data is to more accurately identify the device and distinguish different devices. Even devices of the same model can be distinguished by other features. This provides a basis for the subsequent generation of a unique device identifier. A hash algorithm is applied to the device feature data to generate an initial device feature identifier, and a unique device feature identifier is obtained by deduplication of the identifier. This method ensures the privacy and security of device features and provides a concise device identification method. These data can provide additional user information, such as user access habits, activity range, etc. This helps to understand the user's behavior pattern more comprehensively and improve the accuracy of user identification. Converting these data into access user identifiers provides a way to represent user identity. Combined with the device feature identifier, a more accurate user-device correspondence can be achieved. The device feature identifier and the access user identifier are correspondingly associated to generate a final access device identifier. This step combines device information and user behavior information to generate a more recognizable access device identifier, which can more accurately identify users and devices and improve the security of access control.

[0056] Preferably, step S15 comprises the following steps:

[0057] Step S151: Slice the access device identifier to obtain identifier slice data, wherein the identifier slice data includes access identity identifier slice data and device identifier slice data;

[0058] In the embodiment of the present invention, by slicing the access device identifier, the identifier can be divided into multiple parts, each part representing different information. For example, the identifier includes information such as user ID, device type, access rights, etc., and these information can be sliced ​​into different parts. The sliced ​​data can include access identity identifier slicing and device identifier slicing.

[0059] Step S152: Block construction is performed on the access identity identifier fragment data and the device identifier fragment data to obtain access identity block data and access device block data;

[0060] In an embodiment of the present invention, the access identifier shard data and the device identifier shard data are processed separately by the system. Taking the access identifier shard data as an example, the system combines the shard data with the current timestamp, a random number, and the hash value of the previous block. Then, the system uses a hash algorithm to perform a hash calculation on the combined data to obtain a new hash value as the hash value of the current block. The data structure including the access identifier shard data, timestamp, random number, previous block hash value, and current block hash value constitutes the access identity block data.

[0061] Step S153: performing chain creation processing on the access identity block data and the access device block data to obtain the access identity blockchain and the access device blockchain;

[0062] In an embodiment of the present invention, the system connects the generated access identity block data and access device block data to the corresponding blockchains. For the access identity blockchain, the system adds the new access identity block data to the end of the chain and points it to the previous block. The hash value of the new block will be recorded in the next block, thus forming a chain structure and creating two independent blockchains to store access identity information and device information respectively.

[0063] Step S154: Based on the access device association data and the access device blockchain, a cross-chain mapping interaction is performed on the access identity blockchain to obtain the identity device identification blockchain.

[0064] In an embodiment of the present invention, the system uses the access device association data to establish a mapping relationship between the access identity blockchain and the access device blockchain. For example, the system can add a pointer or hash value to a corresponding block of the access device blockchain in a block of the access identity blockchain. In this way, the corresponding information on the access device blockchain can be found through the information on the access identity blockchain, thereby associating the user identity and device information. Ultimately, through this cross-chain mapping interaction, the system builds a unified identity device identification blockchain.

[0065] The present invention performs data sharding through an access device identifier, and splits it into access identity identifier shard data and device identifier shard data. Data sharding can improve the security of data, and even if part of the shard data is leaked, it will not affect the security of the entire identifier. In addition, data sharding can also improve the efficiency of data processing, and the access identity identifier shard data and the device identifier shard data are respectively constructed into blocks to obtain access identity block data and access device block data, which can ensure the integrity and non-tamperability of the data. The block data is chain-created to form an access identity and device blockchain. Blockchain technology provides a secure and decentralized data storage and management method to ensure data integrity and tamper-proof. Interaction and data exchange between different blockchains are allowed, thereby establishing a unified identity device identification system. This method solves the interoperability problem between different data sources and blockchains, and ensures accurate management of user and device identities in a distributed environment. A distributed, secure, and scalable identity device identification system is implemented, so that the information system can effectively manage user and device access in a complex environment, while ensuring data security and system performance.

[0066] Preferably, step S2 comprises the following steps:

[0067] Step S21: Identify a new access device according to the access device data to obtain the new access device data;

[0068] Step S22: performing identifier conversion on the new access device data to obtain a new device identifier;

[0069] Step S23: performing access identity unit identification on the identity device identification blockchain based on the new access device data to obtain an access identity unit;

[0070] Step S24: locating the block of the identity device identification blockchain based on the access identity unit to obtain the new device access block; verifying and mapping the new device access block according to the new device identifier to obtain the new device block data;

[0071] Step S25: generating a time-series weakening weight for the new device block data according to the new access device data, and obtaining the time-series weakening weight data for the new device;

[0072] Step S26: Perform dynamic identification conversion on the identity device identification blockchain according to the new device block data and the new device timing attenuation weight data to obtain a dynamic device access identifier.

[0073] As an embodiment of the present invention, refer to Figure 2 As shown, Figure 1 Detailed step flow diagram of step S2 in FIG. 1 , in this embodiment, step S2 includes the following steps:

[0074] Step S21: Identify a new access device according to the access device data to obtain the new access device data;

[0075] In the embodiment of the present invention, the system receives the user's access request, which includes the access device data, such as device type, operating system, browser version, IP address, MAC address, etc. The system compares this data with the existing device database. If a matching record is found, the device is considered to be a known device; if no matching record is found, the device is considered to be a new access device.

[0076] Step S22: performing identifier conversion on the new access device data to obtain a new device identifier;

[0077] In the embodiment of the present invention, the system uses a hash algorithm, such as SHA-256 or MD5, to perform hash calculation on the newly accessed device data to generate a hash value of a fixed length as a new device identifier. To ensure the uniqueness of the identifier, the system checks whether the generated identifier already exists in the system. If it already exists, the identifier is regenerated until a unique identifier is generated.

[0078] Step S23: performing access identity unit identification on the identity device identification blockchain based on the new access device data to obtain an access identity unit;

[0079] In an embodiment of the present invention, the system searches for the user identity information associated with the new access device data, such as the IP address, user agent string, etc. in the identity device identification blockchain. The search process involves traversing multiple blocks on the blockchain until a matching record is found. After finding a matching record, the system extracts the corresponding user identity information, such as a user name, user ID, etc., as an access identity unit.

[0080] Step S24: locating the block of the identity device identification blockchain based on the access identity unit to obtain the new device access block; verifying and mapping the new device access block according to the new device identifier to obtain the new device block data;

[0081] In an embodiment of the present invention, the system searches for the corresponding block in the identity device identification blockchain based on the access identity unit. After locating the block, the system compares the new device identifier with the device identifier in the block. If a match is found, the block is marked as a new device access block, and other relevant data in the block, such as access time, access rights, etc., are extracted as new device block data.

[0082] Step S25: generating a time-series weakening weight for the new device block data according to the new access device data, and obtaining the time-series weakening weight data for the new device;

[0083] In the embodiment of the present invention, the system calculates a time-series fading weight value according to the access time of the new access device. For example, an exponential decay function can be used to calculate the weight value according to the difference between the access time and the current time. The larger the time difference, the smaller the weight value. This weight value reflects the credibility of the new device. The closer the access time, the higher the credibility.

[0084] Step S26: Perform dynamic identification conversion on the identity device identification blockchain according to the new device block data and the new device timing attenuation weight data to obtain a dynamic device access identifier.

[0085] In an embodiment of the present invention, the system combines new device block data, new device timing attenuation weight data and other related information, such as access identity units, and uses a hash algorithm to generate a new dynamic device access identifier. This identifier is dynamically generated and includes device information, user identity information and time information.

[0086] The present invention identifies new devices by analyzing access device data, collects new device information, and provides a basis for subsequent identification and verification. This helps to distinguish new devices from registered devices and achieve differentiated management. Converting new device data into a unique identifier facilitates the system to track and manage the access behavior of new devices and prepare for subsequent blockchain operations. This simplifies the complexity of device management. The corresponding user identity unit is identified on the blockchain using the new device data, and the device is associated with the user to ensure the legitimacy of device access. This strengthens the security of device access and prevents unauthorized access. The relevant blocks are located on the blockchain through the access identity unit, and the new device identifier is used for verification mapping to generate new device block data. This securely records the access information of the new device on the blockchain and ensures the immutability of the data. A time-series fading weight is generated based on the new device data and the block data, so that the access rights of the new device decrease over time. This effectively manages the access rights of new devices and reduces security risks. Based on the block data and the time-series fading weight, the blockchain is dynamically identified and converted to generate a dynamic device access identifier. The dynamic identifier enhances security and effectively prevents security threats such as replay attacks. Through dynamic identity management and time-series weight generation, the system can quickly adapt to the addition of new devices and effectively manage device access identities, providing a flexible and secure access control strategy for information systems.

[0087] Preferably, step S25 comprises the following steps:

[0088] Step S251: extracting the data timestamp of the newly accessed device data to obtain the device access timestamp data;

[0089] Step S252: performing time sequence arrangement according to the device access timestamp data to obtain device access time sequence data;

[0090] Step S253: weighting the new device block data based on the device access timing data to obtain timing device weighting data;

[0091] Step S254: performing a timing-fading weight analysis on the new device block data according to the timing-fading device weighting data to obtain the timing-fading weight data of the new device.

[0092] As an embodiment of the present invention, refer to Figure 3 As shown, Figure 2 Detailed step flow diagram of step S25 in FIG. 1 , in this embodiment, step S25 includes the following steps:

[0093] Step S251: extracting the data timestamp of the newly accessed device data to obtain the device access timestamp data;

[0094] In an embodiment of the present invention, the system extracts the timestamp information of the device access from the newly accessed device data. The newly accessed device data contains timestamps in various formats, such as Unix timestamps, date and time strings, etc. The system needs to convert the timestamps in different formats into a standard format, such as Unix timestamps, and store them as device access timestamp data. If the newly accessed device data contains multiple timestamps, such as the start access time and the end access time, the system can select one or more timestamps for extraction according to specific needs.

[0095] Step S252: performing time sequence arrangement according to the device access timestamp data to obtain device access time sequence data;

[0096] In an embodiment of the present invention, the access timestamp data of all devices are sorted by the system and arranged in chronological order to generate device access timing data. The sorting algorithm can select a suitable algorithm according to the amount of data, such as quick sort, merge sort, etc. The device access timing data can be an ordered list or array, in which each element contains a device identifier and a corresponding timestamp.

[0097] Step S253: weighting the new device block data based on the device access timing data to obtain timing device weighting data;

[0098] In an embodiment of the present invention, the system assigns weights to the new device block data based on the device access timing data. For example, different weights can be assigned according to the order of device access. The earlier the access time, the lower the weight of the device, and the later the access time, the higher the weight of the device. Weights can also be assigned according to access frequency. The higher the access frequency, the higher the weight of the device, and the lower the access frequency, the lower the weight of the device. The weight allocation algorithm can be adjusted according to specific needs. The assigned weight value will be added to the new device block data to form the timing device weighted data.

[0099] Step S254: performing a timing-fading weight analysis on the new device block data according to the timing-fading device weighting data to obtain the timing-fading weight data of the new device.

[0100] In an embodiment of the present invention, the system analyzes the timing device decentralization data to calculate the timing weakening weight of each device. The timing weakening weight means that the weight of the device will gradually decrease over time. For example, an exponential decay function or other decay functions can be used to calculate the timing weakening weight based on the difference between the last access time and the current time of the device. The larger the time difference, the more the weight decays. The calculated timing weakening weight will be updated to the new device block data, and finally the new device timing weakening weight data will be obtained.

[0101] The present invention provides a method for recording device access history by extracting device access timestamps from newly accessed device data. This timestamp data provides a basis for subsequent time sequence arrangement and analysis, ensuring the accuracy of device access data. The device access timestamp data is arranged in time sequence to generate device access time sequence data. This step helps the system understand the access mode and frequency of the device, and provides important information for subsequent weight allocation and analysis. Based on the device access time sequence data, the system weights the new device block data to obtain time sequence device weighting data. This weighting mechanism allocates weights according to the device access time sequence, ensuring the fairness of resource allocation and the consideration of device access history. By analyzing the time sequence device weighting data, the system obtains the new device time sequence weakening weight data. This weight analysis method takes into account the historical trend of device access, so that the system can give priority to updated device access data, improving the response speed and resource utilization efficiency. These steps give the device access data a time dimension by recording and analyzing the device access timestamp, so that the system can make more intelligent decisions and resource allocation based on the device access history. This method improves the responsiveness of the information system to device access, especially when a large number of devices are accessing it simultaneously, ensuring the real-time and high efficiency of the system.

[0102] Preferably, step S3 comprises the following steps:

[0103] Step S31: Perform dynamic user access identification on system access user data to obtain user access identification data;

[0104] In the embodiment of the present invention, the system collects the user's access behavior data, such as login time, login location, access frequency, accessed pages, operating habits, etc. The system uses machine learning algorithms, such as rule-based models, anomaly detection models, or behavioral biometric models, to analyze the user's access behavior data and identify the user's identity. The analysis process includes statistical analysis, pattern recognition, anomaly detection, etc. The analysis results will generate user access identification data, such as user behavior patterns, risk scores, etc.

[0105] Step S32: extracting the user identity of the dynamic device access identifier based on the user access identification data to obtain a dynamic user access identifier;

[0106] In an embodiment of the present invention, the system analyzes a dynamic device access identifier, which includes device information, user identity information, and time information. The system extracts user identity information from the dynamic device access identifier based on user access identification data, such as user behavior patterns. The extraction method can be rule-based matching or prediction using a machine learning model. The extracted user identity information, such as user ID, user name, etc., constitutes a dynamic user access identifier.

[0107] Step S33: performing a new device identification comparison on the dynamic device access identifier according to the dynamic user access identifier to obtain new device identification comparison data, wherein the new device identification comparison data includes identification comparison identical data and identification comparison difference data;

[0108] In an embodiment of the present invention, the extracted dynamic user access identifier is compared with the generated dynamic device access identifier by the system. The comparison process can be a simple string comparison or a more complex pattern matching or similarity calculation. If the two identifiers are exactly the same or highly similar, it is considered to be the identification comparison of the same data; otherwise, it is considered to be the identification comparison of different data. The comparison result will be stored as the new device identification comparison data.

[0109] Step S34: If the new device identification comparison data is identification comparison identical data, then the information system is processed for information system access to obtain the same device information system access data; if the new device identification comparison data is identification comparison difference data, then the information system is processed for new device authentication to obtain the new device authentication sequence.

[0110] In an embodiment of the present invention, the data compared with the new device identification is "identification comparison same data", indicating that the current access device is a commonly used device. At this time, the system will directly allow access to the information system, and record the access information, such as access time, access resources, etc., to generate "same device information system access data". Since the system has identified the current device as a commonly used device of the user, no additional identity authentication is required, and access can be directly authorized. The system will record access logs, including user identifiers, device identifiers, access time, access resources and other information for subsequent auditing and analysis. The new device identification comparison data is "identification comparison difference data", indicating that the current access device is not a commonly used device. In order to ensure the security of the information system, the system will perform authentication processing on the new device.

[0111] The present invention performs dynamic user access identification on system access user data, and the system can obtain the current access behavior of the user, which provides basic data for subsequent user identity extraction and device identification comparison. This dynamic identification mechanism ensures that the system can respond to user access changes in real time. Based on the user access identification data, the system extracts user identity information from the dynamic device access identifier to obtain a dynamic user access identifier. This method associates user access behavior with device identity, providing key information for subsequent access control decisions. By comparing the dynamic user access identifier with the dynamic device access identifier, the system obtains new device identification comparison data. This comparison process distinguishes between the same and new devices, providing an important judgment basis for the next access processing. According to the new device identification comparison data, the system decides whether to perform information system access processing or new device authentication processing. This dynamic processing mechanism ensures that the system can make corresponding access control decisions according to the current status of the user and the device, thereby improving the flexibility and security of the system. By analyzing the user access behavior and device identity in real time, the system can make more accurate access decisions, while ensuring the dynamic association between the user identity and the device identity, thereby enhancing the security and responsiveness of the information system.

[0112] Preferably, step S4 comprises the following steps:

[0113] Step S41: performing authentication data conversion on the dynamic device access identifier to obtain an identification authentication sequence;

[0114] In an embodiment of the present invention, by obtaining a dynamic device access identifier, when a user attempts to access an information system using a new device, the system generates a dynamic device access identifier, such as a randomly generated string or a timestamp-based token. Select a preset authentication algorithm. The system pre-sets multiple authentication algorithms, such as SHA-256, HMAC-SHA256, etc., for converting dynamic identifiers into authentication sequences. Apply the algorithm for conversion. The system selects a suitable authentication algorithm according to preset rules, and uses the dynamic device access identifier as input for hashing or encryption. Generate an identification authentication sequence. After algorithm processing, the system obtains a string of characters or numbers of a fixed length, which is the identification authentication sequence.

[0115] Step S42: performing an authentication sequence comparison with the new device authentication sequence based on the identification authentication sequence to obtain new device authentication data, wherein the new device authentication data includes authentication sequence comparison identical data and authentication sequence comparison difference data;

[0116] In an embodiment of the present invention, by obtaining the authentication sequence of the new device, the system obtains preset information from the new device, such as the device fingerprint, hardware serial number, etc., and uses the same authentication algorithm as step S41 to process it to obtain the authentication sequence of the new device. Perform an authentication sequence comparison, and the system compares the identification authentication sequence obtained in step S41 with the authentication sequence of the new device bit by bit. Record the comparison results. During the comparison process, the system records completely identical characters or digital fragments as "authentication sequence comparison identical data"; at the same time, it records the different parts as "authentication sequence comparison difference data". Generate new device sequence authentication data, and the system integrates the "authentication sequence comparison identical data" and the "authentication sequence comparison difference data" to form the new device sequence authentication data.

[0117] Step S43: If the new device authentication sequence is inconsistent with the identification authentication sequence, the new device authentication sequence is subjected to device zero trust identification to obtain a device zero trust identification;

[0118] In an embodiment of the present invention, by judging the authentication result, the system analyzes the authentication data of the new device series obtained in step S42 to determine whether they are exactly the same or there are differences. In the case of exact sameness, if the authentication series are exactly the same, it means that the new device is trustworthy, and the system allows it to access the information system, and records the access records, data transmission and other information as "cross-device information system access data". In the case of differences, if there are differences in the authentication series, it means that the security of the new device needs further confirmation. The system will mark the authentication series of the new device, such as adding a specific tag or adding it to the "list of devices to be reviewed" to form a "device zero trust identification".

[0119] Step S44: Access the information system according to the same-device information system access data and the cross-device information system access data to obtain an information system access plan.

[0120] In an embodiment of the present invention, the system collects the user's access behavior data on different devices, including the same-device information system access data, such as the user's operation records on commonly used devices and cross-device information system access data, such as the user's access request on a new device. The system uses machine learning and other technologies to analyze the user's access behavior patterns, such as commonly used access time, location, data type, etc. Based on the analysis results, the system dynamically adjusts the security policy and formulates a personalized information system access plan. For example, for access requests from trusted devices, the system can simplify the authentication process; for access requests from higher-risk devices, the system can require multi-factor authentication or restrict access rights.

[0121] The present invention converts the dynamic device access identifier into an identification authentication sequence through authentication data conversion, and provides a standardized data format for subsequent authentication sequence comparison and access control decision. This conversion ensures the compatibility and consistency of data. The system compares the identification authentication sequence and the new device authentication sequence to obtain the new device sequence authentication data. This comparison process distinguishes the same and different authentication situations, provides a key judgment basis for the next access processing, and ensures the security of the system. According to the new device sequence authentication data, the system decides whether to perform information system access processing or device zero trust identification. When the authentication sequences are the same, the system allows access; when there are differences, the system performs device zero trust identification to ensure a safe response to abnormal situations. Combined with the same device and cross-device access data, the system formulates an information system access plan. This comprehensive consideration method ensures that the system can make accurate access control decisions in a multi-device environment while maintaining security and user experience. Through the conversion and comparison of dynamic device access identifiers, the system can evaluate the security of access requests in real time and make corresponding access processing based on the authentication results. This approach introduces zero-trust device identity, further enhancing the security of the system and enabling it to effectively manage access control in complex multi-device environments.

[0122] Preferably, step S41 includes the following steps:

[0123] Step S411: performing two-dimensional data conversion on the dynamic device access identifier to obtain two-dimensional dynamic identification data;

[0124] In an embodiment of the present invention, by obtaining a dynamic device access identifier, when a user attempts to access an information system using a new device, the system generates a dynamic device access identifier, such as a randomly generated string or a timestamp-based token. Select a suitable encoding method. The system selects a suitable encoding method according to preset rules, such as ASCII code, Unicode code, etc., to convert the dynamic device access identifier into a digital sequence. Construct a two-dimensional data structure. The system arranges the digital sequence into a two-dimensional matrix according to preset rules, such as row-by-row filling, spiral filling, etc., to form two-dimensional dynamic identification data. The dimension of the matrix can be adjusted according to the length of the identifier and the preset rules.

[0125] Step S412: performing data plane mapping on the two-dimensional dynamic identification data to obtain a dynamic identification two-dimensional plane;

[0126] In an embodiment of the present invention, a two-dimensional plane, such as a rectangular area, is preset by the system as the target area for mapping. The system maps each element of the two-dimensional dynamic identification data to a unique coordinate point on the two-dimensional plane according to a preset algorithm, such as linear mapping, hash mapping, etc. After completing the mapping of all elements, the system obtains a set of coordinate points distributed on the two-dimensional plane, which is the dynamic identification two-dimensional plane. Each coordinate point represents an element in the two-dimensional dynamic identification data.

[0127] Step S413: partition cutting is performed according to the dynamic device access identifier to obtain dynamic identification partition data;

[0128] In an embodiment of the present invention, the analysis system analyzes the characteristics of the dynamic device access identifier, such as length, character composition, etc., and divides it into a number of substrings according to preset rules. The system cuts the dynamic identification two-dimensional plane into the same number of regions according to the number of substrings and a preset algorithm, such as equal cutting, hash cutting, etc. Each region contains a number of coordinate points, constituting a dynamic identification partition data. The system stores all partition data for subsequent coordinate mapping.

[0129] Step S414: coordinate mapping the dynamic identification two-dimensional plane based on the dynamic identification partition data to obtain the dynamic identification partition coordinates;

[0130] In the embodiment of the present invention, by traversing the dynamic identification partition data, the system reads each dynamic identification partition data in turn to obtain all coordinate points contained therein. The system calculates a representative coordinate point of each partition data on a two-dimensional plane as the dynamic identification partition coordinate of the partition according to a preset mapping algorithm, such as center point mapping, average value mapping, etc. After completing the coordinate mapping of all partition data, the system obtains a dynamic identification partition coordinate sequence for subsequent authentication sequence conversion.

[0131] Step S415: Based on the dynamic device access identifier, the dynamic identification partition coordinates are converted into a sequential authentication sequence to obtain an identification authentication sequence.

[0132] In an embodiment of the present invention, by extracting key information: the system extracts key information from the dynamic device access identifier according to preset rules, such as characters at specific positions, the frequency of occurrence of characters, etc. The system determines an order for reading the dynamic identification partition coordinate sequence based on the extracted key information and preset algorithms, such as sequential reading, jump reading, etc. The system reads the dynamic identification partition coordinate sequence in the determined order, and converts the read coordinate values ​​into characters or numbers in a specific format, and finally connects them into a string, which is the identification authentication sequence.

[0133] The present invention provides a visual representation of the identifier by converting the dynamic device access identifier into two-dimensional data. This two-dimensional representation method facilitates subsequent plane mapping and partition cutting operations, and improves the intuitiveness of data processing. The two-dimensional dynamic identification data is mapped to the plane to create a dynamic identification two-dimensional plane. This plane representation method provides an infrastructure for subsequent coordinate mapping and sequential authentication series conversion, ensuring the orderliness and visualization of the data. According to the dynamic device access identifier, the system partitions and cuts the two-dimensional plane to obtain dynamic identification partition data. This partition grouping method can help the system organize and manage a large number of identifiers and improve the efficiency of data processing. By performing coordinate mapping on the dynamic identification partition data, the system obtains the dynamic identification partition coordinates. This coordinate representation method provides a spatial organizational structure, which is convenient for subsequent sequential authentication series conversion and ensures the accuracy and controllability of data processing. Based on the dynamic device access identifier, the system converts the dynamic identification partition coordinates into a sequential authentication series. This conversion process ensures the sequential consistency of the identifier and provides a standardized data format for subsequent authentication and access control decisions. Through two-dimensional data conversion, plane mapping and partition cutting, the system can visually manage dynamic device access identifiers, improve the controllability and visualization of data processing, and lay the foundation for subsequent authentication and access control processes.

[0134] Preferably, step S43 includes the following steps:

[0135] Step S431: performing authentication failure identification conversion on the new device authentication sequence to obtain a failed authentication identifier;

[0136] In the embodiment of the present invention, all events with the authentication result of "authentication failure" are screened out from the authentication sequence. Then, for each failed event, key information is extracted, such as timestamp, device ID, and authentication method, and this information is combined into a structured string or data object. All failed events are converted in this way, and finally a new sequence is obtained, in which each element is an identifier representing a failed authentication. This new sequence is the failed authentication identifier.

[0137] Step S432: fitting the dynamic device access identifier based on the failed authentication identifier to obtain a failed authentication dynamic identifier;

[0138] In the embodiment of the present invention, for each dynamic device access identifier, a failed authentication identifier that is closest to its timestamp and within a certain time window is searched, for example, within 5 minutes before and after the access time. If a matching failed authentication identifier is found, the two are merged into a new data structure, for example, the field of the failed authentication identifier is added to the dynamic device access identifier to form a new identifier containing access information and authentication failure information. If no matching failed authentication identifier is found within the specified time window, the failed authentication identifier can be set to a null value or a default value to obtain a new sequence, namely, a failed authentication dynamic identifier.

[0139] Step S433: performing identifier segmentation according to the failed authentication dynamic identifier to obtain identifier segmentation data, wherein the identifier segmentation data includes failed access segmentation and failed device segmentation;

[0140] In an embodiment of the present invention, the identifier is divided into different failed access blocks according to the access resource information in the failed authentication dynamic identifier. For example, the identifiers can be grouped according to the accessed URL or API interface, and each group represents an access attempt to a specific resource. Then, according to the device ID information in the failed authentication dynamic identifier, the identifier is divided into different failed device blocks. Each group represents all access attempts for a specific device. The identifier block data can be organized into a nested structure, such as a dictionary or a JSON object. For example, with the device ID as the key, the value corresponding to each key is a list, and the list contains all failed access block information for the device.

[0141] Step S434: assigning zero device weight to the failed access block based on the failed device block to obtain zero device weight data;

[0142] In an embodiment of the present invention, for each failed device block, all corresponding failed access blocks are traversed. According to predefined rules, a zero device weight value is assigned to each failed access block. For example, the weight value can be determined based on the number of failed authentications, the failure reason code, or other factors. The lower the weight value, the lower the trust in the device when accessing the resource. For example, if a device fails to access a resource after multiple attempts, its weight when accessing the resource can be set to 0, indicating that the device's access to the resource is completely distrusted.

[0143] Step S435: Generate a zero-trust identifier for the failed authentication dynamic identifier based on the zero device weight data to obtain a device zero-trust identifier.

[0144] In the embodiment of the present invention, the weighted average value of all resources accessed by the device is used as the zero trust identification of the device. Different weight coefficients can also be set according to the importance of different resources, and then the weighted average value is calculated as the zero trust identification of the device. More complex strategies can consider factors such as access time and failure reason code.

[0145] The present invention converts the failed authentication into a failed authentication identifier through authentication failure identification conversion. This identifier represents the device or access request that failed authentication, and provides key information for subsequent processing and analysis. Based on the failed authentication identifier, the system fits the dynamic device access identifier to obtain the failed authentication dynamic identifier. This step ensures that the failed authentication information is incorporated into the dynamic system, so that the system can respond to and process the authentication failure in real time. The system performs identifier block division on the failed authentication dynamic identifier to obtain failed access block and failed device block. This block division method organizes the failure information and provides a basic data structure for the subsequent zero device weight assignment. Based on the failed device block, the system performs zero device weight assignment on the failed access block to obtain zero device weight data. This process ensures that the failed device or access request is assigned a lower weight, reflecting their reduced credibility, and provides basic data for the generation of device zero trust identification. Using the zero device weight data, the system generates a device zero trust identification. This identification represents the zero trust processing of failed authentication devices or requests, ensuring the security and robustness of the system in the face of potential risks. By identifying, fitting, blocking and weighting failure situations, the system can effectively manage and respond to authentication failure events and generate zero-trust identification for devices, thereby improving the security and risk resistance of information systems.

[0146] Therefore, the embodiments should be regarded as illustrative and non-restrictive from all points, and the scope of the present invention is limited by the appended claims rather than the above description, and it is therefore intended that all changes falling within the meaning and range of equivalent elements of the application documents are included in the present invention.

[0147] The above description is only a specific embodiment of the present invention, so that those skilled in the art can understand or implement the present invention. Various modifications to these embodiments will be apparent to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the present invention. Therefore, the present invention will not be limited to the embodiments shown herein, but should conform to the widest scope consistent with the principles and novel features invented herein.

Claims

1. A method for accessing an information system, characterized in that: The following steps are involved: Step S1: Obtain system access user data; Extract access device data from system access user data to obtain access device data; construct an identification blockchain based on system access user data and access device data to obtain an identity device identification blockchain; Step S2: Identify the new access device according to the access device data to obtain the new access device data; perform identifier conversion on the new access device data to obtain the new device identifier; perform new device block conversion on the new access device data to obtain the new device block data; perform dynamic identifier conversion on the identity device identification blockchain according to the new device block data to obtain the dynamic device access identifier; Step S3: Perform dynamic user access identification on the system access user data to obtain user access identification data; perform new device analysis on the dynamic device access identifier based on the user access identification data to obtain device information system access data and new device authentication sequence; Step S4: Perform authentication data conversion on the dynamic device access identifier to obtain an identification authentication sequence; perform information system cross-device access processing on the new device authentication sequence based on the identification authentication sequence to obtain cross-device information system access data; perform information system access based on the same-device information system access data and cross-device information system access data to obtain an information system access plan.

2. The information system access method according to claim 1, characterized in that: Step S1 includes the following steps: Step S11: Obtaining system access user data; Step S12: extracting access device data from system access user data to obtain access device data; Step S13: generating an identifier according to the access device data to obtain an access device identifier; Step S14: performing data association on the system access user data based on the access device identifier to obtain access device association data; Step S15: Perform block mapping based on the access device association data and the access device identifier to obtain the identity device identification blockchain.

3. The information system access method according to claim 2, characterized in that: Step S13 includes the following steps: Step S131: extracting characteristic data according to access device data to obtain device characteristic data; Step S132: performing a hash algorithm conversion on the device feature data to obtain an initial device feature identifier; performing identifier deduplication on the initial device feature identifier to obtain a device feature identifier; Step S133: performing access data analysis according to the access device data to obtain access data, wherein the access data includes access timestamp data and access geographic location data; Step S134: converting the access timestamp data and the access geographic location data into an access system identifier to obtain an access user identifier; Step S135: Correspondingly associate the device feature identifier and the access user identifier to obtain the access device identifier.

4. The information system access method according to claim 2, characterized in that: Step S15 includes the following steps: Step S151: Slice the access device identifier to obtain identifier slice data, wherein the identifier slice data includes access identity identifier slice data and device identifier slice data; Step S152: Block construction is performed on the access identity identifier fragment data and the device identifier fragment data to obtain access identity block data and access device block data; Step S153: performing chain creation processing on the access identity block data and the access device block data to obtain the access identity blockchain and the access device blockchain; Step S154: Based on the access device association data and the access device blockchain, a cross-chain mapping interaction is performed on the access identity blockchain to obtain the identity device identification blockchain.

5. The information system access method according to claim 1, characterized in that: Step S2 includes the following steps: Step S21: Identify a new access device according to the access device data to obtain the new access device data; Step S22: performing identifier conversion on the new access device data to obtain a new device identifier; Step S23: performing access identity unit identification on the identity device identification blockchain based on the new access device data to obtain an access identity unit; Step S24: locating the block of the identity device identification blockchain based on the access identity unit to obtain the new device access block; verifying and mapping the new device access block according to the new device identifier to obtain the new device block data; Step S25: generating a time-series weakening weight for the new device block data according to the new access device data, and obtaining the time-series weakening weight data for the new device; Step S26: Perform dynamic identification conversion on the identity device identification blockchain according to the new device block data and the new device timing attenuation weight data to obtain a dynamic device access identifier.

6. The information system access method according to claim 5, characterized in that: Step S25 includes the following steps: Step S251: extracting the data timestamp of the newly accessed device data to obtain the device access timestamp data; Step S252: performing time sequence arrangement according to the device access timestamp data to obtain device access time sequence data; Step S253: weighting the new device block data based on the device access timing data to obtain timing device weighting data; Step S254: performing a timing-fading weight analysis on the new device block data according to the timing-fading device weighting data to obtain the timing-fading weight data of the new device.

7. The information system access method according to claim 1, characterized in that: Step S3 includes the following steps: Step S31: Perform dynamic user access identification on system access user data to obtain user access identification data; Step S32: extracting the user identity of the dynamic device access identifier based on the user access identification data to obtain a dynamic user access identifier; Step S33: performing a new device identification comparison on the dynamic device access identifier according to the dynamic user access identifier to obtain new device identification comparison data, wherein the new device identification comparison data includes identification comparison identical data and identification comparison difference data; Step S34: If the new device identification comparison data is identification comparison identical data, then the information system is processed for information system access to obtain the same device information system access data; if the new device identification comparison data is identification comparison difference data, then the information system is processed for new device authentication to obtain the new device authentication sequence.

8. The information system access method according to claim 1, characterized in that: Step S4 includes the following steps: Step S41: performing authentication data conversion on the dynamic device access identifier to obtain an identification authentication sequence; Step S42: performing an authentication sequence comparison with the new device authentication sequence based on the identification authentication sequence to obtain new device authentication data, wherein the new device authentication data includes authentication sequence comparison identical data and authentication sequence comparison difference data; Step S43: If the new device authentication sequence is inconsistent with the identification authentication sequence, the new device authentication sequence is subjected to device zero trust identification to obtain a device zero trust identification; Step S44: Access the information system according to the same-device information system access data and the cross-device information system access data to obtain an information system access plan.

9. The information system access method according to claim 8, characterized in that: Step S41 includes the following steps: Step S411: performing two-dimensional data conversion on the dynamic device access identifier to obtain two-dimensional dynamic identification data; Step S412: performing data plane mapping on the two-dimensional dynamic identification data to obtain a dynamic identification two-dimensional plane; Step S413: partition cutting is performed according to the dynamic device access identifier to obtain dynamic identification partition data; Step S414: coordinate mapping the dynamic identification two-dimensional plane based on the dynamic identification partition data to obtain the dynamic identification partition coordinates; Step S415: Based on the dynamic device access identifier, the dynamic identification partition coordinates are converted into a sequential authentication sequence to obtain an identification authentication sequence.

10. The information system access method according to claim 8, characterized in that: Step S52 includes the following steps: Step S431: performing authentication failure identification conversion on the new device authentication sequence to obtain a failed authentication identifier; Step S432: fitting the dynamic device access identifier based on the failed authentication identifier to obtain a failed authentication dynamic identifier; Step S433: performing identifier segmentation according to the failed authentication dynamic identifier to obtain identifier segmentation data, wherein the identifier segmentation data includes failed access segmentation and failed device segmentation; Step S434: assigning zero device weight to the failed access block based on the failed device block to obtain zero device weight data; Step S435: Generate a zero-trust identifier for the failed authentication dynamic identifier based on the zero device weight data to obtain a device zero-trust identifier.

Images