A method and system for formal verification of a cloud identity pool and role trust policy
By constructing a unified resource model across services and performing formal verification, the problem of identifying cross-service consistency risks in cloud identity pools and role trust policies was solved, enabling automated risk detection and report generation, thus improving security and efficiency.
CN122419871APending Publication Date: 2026-07-17INSTITUTE OF INFORMATION ENGINEERING CHINESE ACADEMY OF SCIENCES
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- INSTITUTE OF INFORMATION ENGINEERING CHINESE ACADEMY OF SCIENCES
- Filing Date
- 2026-04-24
- Publication Date
- 2026-07-17
AI Technical Summary
Technical Problem
Existing technologies make it difficult to uniformly extract cloud identity pools and role trust policy configuration objects across services, explicitly model their relationships, and perform formal verification, resulting in difficulties in identifying and auditing cross-service consistency risks.
Method used
A unified resource model is constructed across services. Based on this model, sensitive access reachability risk and residual trust risk are formally defined, and the verification results are determined by a solver to generate a structured risk report.
Benefits of technology
It enables automated detection of cross-service risks, improves detection coverage, reduces manual auditing costs, and provides clear remediation guidelines.
✦ Generated by Eureka AI based on patent content.
Smart Images
Figure CN122419871A_ABST
Abstract
本发明公开一种云身份池与角色信任策略的形式化验证方法及系统，属于访问管理安全技术领域。该方法包括：对于集成云身份池的访问控制体系，基于该访问控制体系的配置快照，构建跨服务的统一资源模型；基于统一资源模型分别对敏感访问可达风险与残留信任风险进行形式化定义，得到风险谓词集合；生成统一资源模型的语义约束，并将该语义约束与每一风险谓词合并为可满足性查询交由求解器判定，得到该访问控制体系在该风险谓词下的验证结果。本发明可以提升云访问控制体系的检测覆盖面、降低人工审计成本。
Need to check novelty before this filing date? Find Prior Art