Dynamic token-based access control method, apparatus, device, medium and program

Abstract

This invention discloses an access control method, apparatus, device, medium, and program based on dynamic tokens. The method includes: responding to receiving an access request from a target user, acquiring current-time status data of a target area, a target user identifier, and preset security factor information; generating a dynamic token based on the status data, the target user identifier, and the security factor information; verifying the dynamic token, generating a token verification result, and determining a comprehensive trust score based on the token verification result and the status data; determining a dynamic permission level based on the comprehensive trust score and the security level of the target area, and determining the target user's access permissions based on the dynamic permission level. The technical solution of this invention can dynamically determine user access permissions, improving the flexibility and accuracy of access control.

Description

Technical Field

[0001] This invention relates to the field of operation and maintenance management technology, and in particular to access control methods, devices, equipment, media and programs based on dynamic tokens. Background Technology

[0002] In the operation and maintenance management of substations, access control is a key link in ensuring the safe operation of substations.

[0003] Currently, traditional access control methods mainly rely on fixed mechanisms such as static passwords and role-based access permissions. While these can limit unauthorized access to some extent, they have significant limitations when facing complex substation environments and dynamically changing security threats. For example, static passwords are easily cracked or leaked, and role-based access permissions are difficult to adjust dynamically once set, making it impossible to effectively respond to sudden security incidents. This results in a lack of flexibility and precision in substation access control.

[0004] Therefore, there is an urgent need for a method that can improve the flexibility and accuracy of access control. Summary of the Invention

[0005] This invention provides a method, apparatus, device, medium, and program for access control based on dynamic tokens, which can dynamically determine user access permissions and improve the flexibility and accuracy of access control.

[0006] According to a first aspect of the present invention, an access control method based on dynamic tokens is provided, comprising: In response to receiving an access request from a target user, obtain the current status data of the target area, the target user identifier, and preset security information; A dynamic token is generated based on the status data, the target user identifier, and the security factor information; The dynamic token is verified to generate a token verification result, and a comprehensive trust score is determined based on the token verification result and the status data. Based on the comprehensive trust score and the security level of the target area, a dynamic permission level is determined, and the access permissions of the target user are determined according to the dynamic permission level.

[0007] According to a second aspect of the present invention, a dynamic token-based access control device is provided, comprising: The acquisition module is used to respond to the access request received from the target user and acquire the current status data of the target area, the target user identifier, and preset security factor information. The generation module is used to generate a dynamic token based on the status data, the target user identifier, and the security factor information; The verification module is used to verify the dynamic token, generate a token verification result, and determine a comprehensive trust score based on the token verification result and the status data. The determination module is used to determine the dynamic permission level based on the comprehensive trust score and the security level of the target area, and to determine the access permissions of the target user according to the dynamic permission level.

[0008] According to a third aspect of the present invention, an electronic device is provided, the electronic device comprising: At least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores a computer program executable by the at least one processor, the computer program being executed by the at least one processor to enable the at least one processor to perform the dynamic token-based access control method according to any embodiment of the present invention.

[0009] According to a fourth aspect of the present invention, a computer-readable storage medium is provided, the computer-readable storage medium storing computer instructions for causing a processor to execute and implement the dynamic token-based access control method according to any embodiment of the present invention.

[0010] According to a fifth aspect of the present invention, a computer program product is provided, the computer program product comprising a computer program that, when executed by a processor, implements the dynamic token-based access control method described in any embodiment of the present invention.

[0011] The technical solution of this invention can, in response to receiving an access request from a target user, obtain the current status data of the target area, the target user identifier, and preset security factor information; generate a dynamic token based on the status data, the target user identifier, and the security factor information; verify the dynamic token to generate a token verification result; determine a comprehensive trust score based on the token verification result and the status data; determine a dynamic permission level based on the comprehensive trust score and the security level of the target area; and determine the target user's access permissions based on the dynamic permission level. This method improves the flexibility and accuracy of access control by dynamically determining user access permissions based on status data, the target user identifier, and security factor information.

[0012] It should be understood that the description in this section is not intended to identify key or essential features of the embodiments of the present invention, nor is it intended to limit the scope of the invention. Other features of the invention will become readily apparent from the following description. Attached Figure Description

[0013] To more clearly illustrate the technical solutions in the embodiments of the present invention, the accompanying drawings used in the description of the embodiments will be briefly introduced below. Obviously, the accompanying drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0014] Figure 1 This is a flowchart of an access control method based on a dynamic token according to Embodiment 1 of the present invention; Figure 2 This is a flowchart of an access control method based on a dynamic token according to Embodiment 2 of the present invention; Figure 3 This is a schematic diagram of the structure of an access control device based on a dynamic token according to Embodiment 3 of the present invention; Figure 4 This is a schematic diagram of the structure of an electronic device that implements the access control method based on dynamic tokens according to embodiments of the present invention. Detailed Implementation

[0015] To enable those skilled in the art to better understand the present invention, the technical solutions of the present invention will be clearly and completely described below with reference to the accompanying drawings of the embodiments of the present invention. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort should fall within the scope of protection of the present invention.

[0016] It should be noted that the terms "first," "second," etc., in the specification, claims, and accompanying drawings of this invention are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate so that the embodiments of the invention described herein can be implemented in orders other than those illustrated or described herein. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover a non-exclusive inclusion; for example, a process, method, system, product, or apparatus that comprises a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such processes, methods, products, or apparatus.

[0017] Example 1 Figure 1This is a flowchart of an access control method based on dynamic tokens provided in Embodiment 1 of the present invention. This embodiment is applicable to situations involving dynamic access control in substations. The method can be executed by a dynamic token-based access control device, which can be implemented in hardware and / or software and configured in an operation and maintenance management system or security control equipment. Figure 1 As shown, the method includes: S101. In response to receiving the access request from the target user, obtain the current status data of the target area, the target user identifier, and the preset security factor information.

[0018] The target user can be a user who initiates an access request to obtain operating permissions for relevant resources or equipment in the target area. The access request can be an instruction or signal used to request access rights. The target area can be the physical area the target user requests access to; for example, it could be a substation in a fixed location. Different target areas can be pre-defined and have corresponding security levels recorded.

[0019] Status data can be a collection of real-time information that characterizes the operational status and environmental conditions of a target area at the current moment. This status data can be collected from various monitoring devices deployed in the target area.

[0020] The target user identifier can be identification information used to uniquely identify the target user.

[0021] Security factor information can be a pre-defined reference for assessing the level of security risks faced by the current access request. For example, it can be environmental risk factors pre-configured based on historical security events or system security policies.

[0022] For example, upon receiving an access request from a target user, the request can be parsed to extract the target user's identifier. Simultaneously, the current time information can be obtained, and status data of the target area at the current time can be collected from various monitoring devices deployed in the target area. Furthermore, preset security factor information can be retrieved from a pre-defined security policy library.

[0023] S102. Generate a dynamic token based on the status data, the target user identifier, and the security factor information.

[0024] Dynamic tokens can be used to verify the legitimacy of a user's identity and the timeliness of access requests during the user access process.

[0025] For example, after obtaining status data, target user identifier, and security factor information, the status data, target user identifier, and security factor information can be comprehensively processed through a preset token generation logic, so that the generated dynamic token can be bound to the target user's identity information, reflect the current environmental status of the target area, and reflect the risk conditions represented by the associated security factor information.

[0026] It should be noted that, since the status data changes dynamically over time, the dynamic tokens generated for the same target user at different times are different, thus realizing a dynamic correlation between the token generation process and the real-time status of the target area.

[0027] S103. Verify the dynamic token, generate a token verification result, and determine a comprehensive trust score based on the token verification result and the status data.

[0028] The token verification result is the verification conclusion output after validating the validity of the dynamic token, used to characterize whether the dynamic token has passed verification. The comprehensive trust score is a score value obtained by quantitatively evaluating the trustworthiness of the target user's current access request based on multiple dimensions such as the comprehensive token verification result and the target area status.

[0029] For example, after generating a dynamic token, it can first be verified by determining whether the dynamic token matches a preset reference credential, thus obtaining a token verification result. After obtaining the token verification result, it can be further combined with state data, and a preset comprehensive evaluation logic can be used to perform multi-dimensional quantitative calculations on the overall trustworthiness of the target user's current access request, resulting in a comprehensive trust score. It is understandable that the higher the comprehensive trust score determined based on the token verification result and state data, the more trustworthy the target user's access request is under the current environmental conditions.

[0030] This allows for further consideration of the actual operational status of the target area during the process of determining the credibility of access requests, thereby further improving the accuracy of access control.

[0031] S104. Based on the comprehensive trust score and the security level of the target area, determine the dynamic permission level, and determine the access permissions of the target user according to the dynamic permission level.

[0032] Dynamic permission levels can be quantifiable indicators representing the level of operational permissions a target user can obtain in a current access request. The security level of a target area can be a pre-defined level based on the importance or sensitivity of the target area. Access permissions can be the scope of permissions granted to a target user to perform specific operations on resources or devices within the target area.

[0033] For example, after obtaining the overall trust score, the security level of the target area can be retrieved first. Then, based on the overall trust score and the security level of the target area, a dynamic permission level can be calculated in real time using preset permission level determination rules. It can be understood that the dynamic permission level can change dynamically according to the overall trust score and the security level of the target area for each access request.

[0034] After determining the dynamic permission level, the access permissions corresponding to the dynamic permission level can be determined based on the preset mapping relationship between permission levels and operation permissions, and the access permissions can be granted to the target user.

[0035] The technical solution of this invention can, in response to receiving an access request from a target user, obtain the current status data of the target area, the target user identifier, and preset security factor information. Based on the status data, the target user identifier, and the security factor information, a dynamic token is generated. The dynamic token is verified to generate a token verification result. Based on the token verification result and the status data, a comprehensive trust score is determined. Based on the comprehensive trust score and the security level of the target area, a dynamic permission level is determined. Finally, the access rights of the target user are determined based on the dynamic permission level. It is evident that this invention integrates the real-time status data of the target area into the dynamic token generation process and the comprehensive trust score calculation process, enabling the token generation and verification to dynamically reflect the actual operating status of the target area. This solves the problem in existing technologies where access control relies on fixed mechanisms and cannot dynamically adjust permissions. It achieves dynamic determination of access rights based on real-time environmental status and the trust level of the target user, improving the flexibility and accuracy of access control.

[0036] Example 2 Figure 2 This is a flowchart of an access control method based on dynamic tokens provided in Embodiment 2 of the present invention. This embodiment can further improve and explain Embodiment 1 described above. Figure 2 As shown, the method includes: S201. In response to receiving the access request from the target user, obtain the current status data of the target area, the target user identifier, and the preset security factor information.

[0037] S202. Calculate the correction factor based on the state data, and generate the target user key based on the target user identifier and the preset original key.

[0038] The correction factor can be a parameter used to quantify the current environmental risk level of the target area. It should be noted that the status data can include equipment operating status data (such as equipment temperature, load current, and operating time), environmental monitoring data (such as perimeter intrusion alarms, access control status, and video surveillance data), area security level information (such as the security level classification of high-voltage areas, control areas, and maintenance areas), and network status data (such as network load, communication latency, and secure connection status). Accordingly, for multi-dimensional status data, the status risk value for each dimension can be calculated separately, and then the status risk values ​​can be summarized to obtain the correction factor.

[0039] The target user key can be an encryption key uniquely corresponding to the target user, generated through key derivation based on the target user identifier and a preset original key. The preset original key can be a pre-configured base key.

[0040] For example, risk calculations can be performed on the multi-dimensional environmental parameters contained in the state data, and a weighted assessment can be conducted to obtain a correction factor that reflects the current environmental risk of the target area. The specific calculation is as follows: Where E can represent a correction factor. It can represent the equipment risk value calculated based on equipment operating status data. It can represent the environmental safety value calculated based on environmental monitoring data. This can represent the regional risk value calculated based on the regional security level. , can represent the network security value calculated based on network state, and η, θ, ι, κ can represent the weight coefficients corresponding to each state data.

[0041] At the same time, based on a preset key derivation function, the target user identifier can be operated on with the original key to generate a target user key that uniquely corresponds to the target user.

[0042] S203. Generate a token seed based on the current timestamp, the security factor information, and the correction factor.

[0043] The current timestamp can be the current time when the access request was received. The token seed is a set of basic input parameters that can be used to generate dynamic tokens, integrating time information, security risk information, and environmental risk information.

[0044] For example, the current timestamp corresponding to the current moment can be obtained, and the current timestamp, security factor information and correction factor can be combined to generate a token seed.

[0045] Because the correction factor changes dynamically with the environmental state of the target area, and the current timestamp changes over time, the token seeds generated at different times and under different environmental conditions are all different, ensuring the timeliness and environmental relevance of the token seeds.

[0046] S204. Generate the dynamic token based on the target user key and the token seed.

[0047] For example, the target user key can be used as the encryption key, the token seed can be used as the message to be processed, and the token seed can be encrypted using a preset token generation algorithm to generate an initial token value.

[0048] Then, the initial token value can be truncated according to a preset method, and logical operations can be performed with a preset mask to finally obtain a dynamic token.

[0049] Since the generation of token seeds depends on the correction factor and the current timestamp, and the correction factor depends on the real-time status data of the target area, dynamic tokens can dynamically bind the real-time environmental status of the target area, the identity information of the target user, and the time information of the current moment, so that the token value is associated with the actual operating status of the target area.

[0050] S205. Verify the dynamic token, generate a token verification result, determine a token verification score based on the token verification result, and determine a device security score based on the status data.

[0051] The token verification score can be a score value generated according to preset scoring rules, used to quantify the degree of token verification success. For example, the token verification score can be calculated as the ratio of the number of successful matches to the number of verification requests.

[0052] Equipment safety scores can be scores generated based on real-time status data of the target area, according to preset equipment safety assessment rules, to quantify the current level of equipment safety. For example, equipment safety scores can be determined in reverse based on the degree of abnormality of parameters such as equipment temperature and load current.

[0053] For example, after generating a dynamic token, a verification operation can be performed on the dynamic token, comparing it with a pre-generated reference credential, and obtaining a token verification result based on the matching result. Furthermore, a corresponding token verification score can be determined according to a preset scoring mapping rule based on the degree of matching represented by the token verification result. For example, a higher token verification score is assigned when the token matches perfectly, and a lower token verification score is assigned when the token does not match.

[0054] Simultaneously, equipment operating status data can be extracted from the status data, including at least one of equipment temperature, load current, and operating time. According to the preset equipment safety assessment algorithm, the operating parameters of each piece of equipment are quantitatively analyzed to obtain the equipment safety score.

[0055] Understandably, when the equipment operating parameters are within the normal range, the equipment safety score is high, indicating that the current equipment is operating safely; when the equipment operating parameters deviate abnormally, the equipment safety score decreases accordingly.

[0056] S206. Obtain the biometric verification score and behavioral pattern verification score of the target user.

[0057] The biometric verification score is a rating generated based on the degree of matching of the biometric verification results for the target user. The behavioral pattern verification score is a rating generated based on the degree of consistency between the current behavior and the historical behavioral patterns of the target user, after analyzing the historical behavioral patterns of the target user.

[0058] For example, a biometric identification device can be invoked to collect the biometric information of the target user and compare it with a pre-stored biometric template. The biometric verification score can be determined based on the number of matching feature points (such as the number of matching fingerprint feature points).

[0059] Simultaneously, it can retrieve the target user's historical operational behavior sequences, construct standard behavioral patterns, and analyze the deviation between the target user's current operational behavior and the standard behavioral patterns. Based on the degree of deviation, a behavioral pattern verification score is determined. A higher behavioral pattern verification score is achieved when the current operational behavior closely matches the historical behavioral patterns.

[0060] S207. The token verification score, the biometric verification score, the behavior pattern verification score, and the device security score are weighted and calculated, and then corrected by combining the security factor information and the correction factor to obtain the comprehensive trust score.

[0061] For example, in this embodiment, corresponding weight coefficients can be pre-configured for token verification score, biometric verification score, behavioral pattern verification score and device security score. The sum of each weight coefficient can be a preset fixed value, and the specific value of each weight coefficient can be adjusted according to actual security requirements.

[0062] Furthermore, the token verification score, biometric verification score, behavioral pattern verification score, and device security score can be weighted and summed based on their respective weighting coefficients. Security factor information and correction factors can be used as penalty correction terms to subtract from the weighted summation result, thus obtaining a comprehensive trust score. The specific calculation process is as follows: Here, "Score" can represent the overall credibility score. It can represent the token verification score. It can represent a biometric verification score. It can represent behavioral verification scores. W can represent the equipment safety score, W can represent the safety factor information, E can represent the correction factor, and w1-w6 represent the weight coefficients of each verification score, safety factor information, and correction factor, respectively.

[0063] It is understandable that when the correction factor is high, it indicates that the target area currently has a greater environmental risk, and the corresponding deduction is also greater. As a result, under the condition of high environmental risk, the overall trust score is dynamically reduced, thereby strengthening the security constraints of access control.

[0064] S208. Determine the basic permission level pre-set according to the security level of the target area, and obtain the device criticality level of the target device in the access request.

[0065] The basic permission level can be the initial permission level that is pre-set according to the security level of different target areas and serves as the starting point for permission calculation.

[0066] The target device can be the specific device that the target user expects to operate through the access request, which can be determined by parsing the access request. The device criticality level can be a pre-defined level label based on the importance or sensitivity of the target device in the target area.

[0067] For example, based on the access request issued by the target user, the target area requested for access can be determined, and the corresponding basic permission level can be retrieved according to the functional area type to which the target area belongs. Target areas with different security levels and functional area types correspond to different basic permission levels. For example, high-voltage areas, control areas, and maintenance areas can be assigned different basic permission levels. Areas with higher security levels have correspondingly lower basic permission levels, ensuring that high-security areas have a higher initial access threshold. Simultaneously, information about the target device can be extracted from the access request, and the device criticality level of the target device can be determined according to preset device importance classification rules. It can be understood that the device criticality level coefficient can be divided into multiple levels based on device sensitivity, corresponding to ordinary devices, important devices, and core devices. The device criticality level of core devices is higher than that of ordinary devices.

[0068] S209. Compare the comprehensive confidence score with a preset threshold, and calculate the permission level adjustment amount based on the comparison result.

[0069] The preset threshold can be a pre-defined score threshold used to determine whether to trigger a permission level upgrade. The permission level adjustment amount can be the change in permission level calculated based on a comparison between the comprehensive trust score and the preset threshold, according to a preset adjustment rule.

[0070] For example, the calculated overall trust score can be compared with a preset threshold. When the overall trust score exceeds the preset threshold, a positive permission level adjustment amount can be calculated based on the magnitude of the excess, according to a preset adjustment step size, that is, the basic permission level can be increased.

[0071] When the overall credibility score does not reach the preset threshold, the permission level adjustment amount can be determined to be zero, and the basic permission level can be kept unchanged.

[0072] In addition, a correction factor can be introduced to suppress and correct the amount of permission level adjustment. When the correction factor is high, the amount of permission level adjustment is reduced accordingly, so as to limit the extent of permission increase in a high-risk environment.

[0073] S210. Determine the dynamic permission level based on the basic permission level, the permission level adjustment amount, and the device criticality level.

[0074] Among them, the dynamic permission level can be the level of operation permission that the target user can obtain in the current access request, which is determined in real time after considering the comprehensive basic permission level, permission level adjustment amount and device critical level.

[0075] For example, the basic permission level and the adjusted permission level can be superimposed, and the device criticality level can be used as a weighting coefficient to adjust the superposition result to calculate the initial dynamic permission level. Then, the initial dynamic permission level can be compared with the preset maximum permission level, and the smaller value between the two can be taken as the final dynamic permission level.

[0076] The specific calculation process for permission level adjustment and dynamic permission levels can be as follows: in, Indicates dynamic permission levels. Indicates the basic permission level. Indicates the highest level of privilege. Indicates the amount of permission level adjustment. The key level of the equipment is represented by Score, the overall credibility score, Threshold, Step, μ, E, and floor.

[0077] This method ensures that the dynamic permission level will not exceed the highest permission level allowed by the system, preventing permission overreach caused by calculation errors or abnormal data.

[0078] S211. Determine the access permissions of the target user based on the dynamic permission level.

[0079] The technical solution of this embodiment can further realize refined and dynamic control of access permissions. At the same time, by introducing the equipment criticality level coefficient and the environmental risk inhibition coefficient, the adjustment of the permission level can reflect the interactive influence of the equipment importance and the environmental risk situation, which further improves the security, accuracy and environmental adaptability of access control.

[0080] Based on the above embodiments, as one possible approach, verifying the dynamic token and generating a token verification result may include: The verification time window is determined based on the correction factor and the security factor information; Within the verification time window, multiple reference tokens are generated; The dynamic token is matched and verified with each of the reference tokens to obtain the token verification result.

[0081] The verification time window can be a time interval used to limit the validity of the dynamic token. Within this time interval, the system can accept verification requests for the dynamic token, and the dynamic token becomes invalid outside of this time interval.

[0082] Reference tokens can be standard tokens pre-generated at multiple points in time within a verification time window, based on the same logic as generating dynamic tokens, and used for comparison with dynamic tokens.

[0083] For example, after receiving the dynamic token to be verified, the correction factor and security factor information corresponding to the current moment can be extracted. Based on the degree of environmental risk represented by the correction factor and the degree of basic security risk represented by the security factor information, the size of the verification time window used for this verification can be dynamically determined.

[0084] Specifically, the verification time window size can be dynamically adjusted using the following formula: in, Indicates the size of the verification time window. This indicates the preset base time window size. This represents the expansion coefficient corresponding to the safety factor information. This represents the expansion coefficient corresponding to the correction factor, where W represents the safety factor information and E represents the correction factor.

[0085] Understandably, the base time window size can be a preset token validity period under standard security conditions. The expansion coefficient can be used to adjust the influence of security factor information and correction factor on the verification time window. When the correction factor is high, it indicates a higher current environmental risk in the target area, and the verification time window can be correspondingly shortened to increase the rigor of verification; when the correction factor is low, the verification time window can be appropriately widened to balance the fault tolerance of verification.

[0086] After determining the verification time window, multiple time points can be selected within the time range covered by the verification time window. For each time point, the same method as generating the dynamic token is used to generate the corresponding reference token, thereby obtaining a reference token set consisting of multiple reference tokens.

[0087] Then, the dynamic token input by the user can be compared with each reference token in the reference token set one by one. If the dynamic token matches any of the reference tokens, a token verification result indicating that the verification has passed is generated; if the dynamic token does not match any of the reference tokens, a token verification result indicating that the verification has failed is generated.

[0088] In this way, the token verification process can dynamically adjust the verification time constraints based on the environmental risk status of the target area.

[0089] Based on the above embodiments, the method may further include: During the target user's access process, the target user's behavior data and the device status changes in the target area are monitored in real time. When abnormal behavior data or device status changes are detected, a security warning is triggered and preset security actions are performed.

[0090] Among them, behavioral data can be the sequence data of operation behavior generated by the target user when operating the device in the target area after obtaining access rights, including at least one of operation type, operation object, operation time and operation frequency.

[0091] Equipment status changes can be changes in operating parameters of equipment within the target area during access by the target user, including at least one of equipment temperature changes, load current changes, and operating status switching.

[0092] A safety alert can be a warning message indicating the existence of a safety risk. A safety response procedure can be a pre-set action to limit or eliminate the safety risk.

[0093] For example, during the process of a target user gaining access and operating devices within the target area, the user's operational behavior sequence can be continuously collected to form behavioral data; at the same time, the operating parameters of relevant devices within the target area can be continuously obtained through various monitoring devices deployed within the target area to form device status change data.

[0094] Furthermore, the collected behavioral data can be compared and analyzed with pre-established normal behavioral patterns, which can be constructed based on the target user's historical operation data or the operation data of similar users. When the deviation between the behavioral data and the normal behavioral pattern exceeds a preset abnormal behavior threshold, it can be determined that the target user has engaged in abnormal behavior. Simultaneously, the collected device status change data can be compared with preset normal operating parameter ranges. When the device status change data exceeds the normal operating parameter range, it can be determined that the device status is abnormal.

[0095] When abnormal behavioral data or abnormal changes in device status are detected, a security warning can be generated and pushed to a preset management terminal to prompt relevant management personnel to pay attention and intervene in a timely manner.

[0096] At the same time, it can automatically execute security handling operations corresponding to the anomaly type according to the preset security handling strategy, so as to limit the further expansion of security risks at the first time an anomaly occurs.

[0097] Example 3 Figure 3 This is a schematic diagram of an access control device based on a dynamic token, provided in Embodiment 3 of the present invention. Figure 3 As shown, the device includes: The acquisition module 301 can be used to respond to the access request received from the target user and acquire the status data of the target area, the target user identifier, and preset security factor information at the current moment; The generation module 302 can be used to generate a dynamic token based on the status data, the target user identifier, and the security factor information; The verification module 303 can be used to verify the dynamic token, generate a token verification result, and determine a comprehensive trust score based on the token verification result and the status data. The determination module 304 can be used to determine the dynamic permission level based on the comprehensive trust score and the security level of the target area, and to determine the access permissions of the target user according to the dynamic permission level.

[0098] The technical solution of this invention can, in response to receiving an access request from a target user, obtain the current status data of the target area, the target user identifier, and preset security factor information; generate a dynamic token based on the status data, the target user identifier, and the security factor information; verify the dynamic token to generate a token verification result; determine a comprehensive trust score based on the token verification result and the status data; determine a dynamic permission level based on the comprehensive trust score and the security level of the target area; and determine the target user's access permissions based on the dynamic permission level. This method improves the flexibility and accuracy of access control by dynamically determining user access permissions based on status data, the target user identifier, and security factor information.

[0099] Optionally, the generation module 302 may include: The calculation unit can be used to calculate the correction factor based on the state data, and to generate the target user key based on the target user identifier and the preset original key; The first generation unit can be used to generate a token seed based on the current timestamp, the security factor information, and the correction factor; The second generation unit can be used to generate the dynamic token based on the target user key and the token seed.

[0100] Optional, verification module 303 can be used for: The verification time window is determined based on the correction factor and the security factor information; Within the verification time window, multiple reference tokens are generated; The dynamic token is matched and verified with each of the reference tokens to obtain the token verification result.

[0101] Optionally, verification module 303 can also be used for: A token verification score is determined based on the token verification result, and a device security score is determined based on the status data. Obtain the biometric verification score and behavioral pattern verification score of the target user; The token verification score, the biometric verification score, the behavioral pattern verification score, and the device security score are weighted and calculated, and then corrected by combining the security factor information and the correction factor to obtain the comprehensive trust score.

[0102] Optionally, module 304 can be used to: Determine the basic permission level pre-set according to the security level of the target area, and obtain the device criticality level of the target device in the access request; The overall credibility score is compared with a preset threshold, and the permission level adjustment amount is calculated based on the comparison result. The dynamic permission level is determined based on the basic permission level, the permission level adjustment amount, and the device criticality level.

[0103] Optionally, the device may further include a monitoring module.

[0104] The monitoring module can be used to monitor the target user's behavior data and the device status changes of the target area in real time during the target user's access process; when abnormal behavior data or device status changes are detected, a security warning is triggered and preset security handling operations are executed.

[0105] The access control device based on dynamic tokens provided in the embodiments of the present invention can execute the access control method based on dynamic tokens provided in any embodiment of the present invention, and has the corresponding functional modules and beneficial effects of executing the method.

[0106] Example 4 Figure 4 A schematic diagram of an electronic device 400 that can be used to implement embodiments of the present invention is shown. The electronic device is intended to represent various forms of digital computers, such as laptop computers, desktop computers, workstations, personal digital assistants, servers, blade servers, mainframe computers, and other suitable computers. The electronic device can also represent various forms of mobile devices, such as personal digital processors, cellular phones, smartphones, wearable devices (such as helmets, glasses, watches, etc.), and other similar computing devices. The components shown herein, their connections and relationships, and their functions are merely illustrative and are not intended to limit the implementation of the invention described and / or claimed herein.

[0107] like Figure 4 As shown, the electronic device 400 includes at least one processor 401 and a memory, such as a read-only memory (ROM) 402 or a random access memory (RAM) 403, communicatively connected to the at least one processor 401. The memory stores computer programs executable by the at least one processor. The processor 401 can perform various appropriate actions and processes based on the computer program stored in the ROM 402 or loaded into the RAM 403 from storage unit 408. The RAM 403 may also store various programs and data required for the operation of the electronic device 400. The processor 401, ROM 402, and RAM 403 are interconnected via a bus 404. An input / output (I / O) interface 405 is also connected to the bus 404.

[0108] Multiple components in electronic device 400 are connected to I / O interface 405, including: input unit 406, such as keyboard, mouse, etc.; output unit 407, such as various types of displays, speakers, etc.; storage unit 408, such as disk, optical disk, etc.; and communication unit 409, such as network card, modem, wireless transceiver, etc. Communication unit 409 allows electronic device 400 to exchange information / data with other devices through computer networks such as the Internet and / or various telecommunications networks.

[0109] Processor 401 can be a variety of general-purpose and / or special-purpose processing components with processing and computing capabilities. Some examples of processor 401 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various special-purpose artificial intelligence (AI) computing chips, various processors running machine learning model algorithms, a digital signal processor (DSP), and any suitable processor, controller, microcontroller, etc. Processor 401 performs the various methods and processes described above, such as dynamic token-based access control methods.

[0110] In some embodiments, the dynamic token-based access control method may be implemented as a computer program tangibly contained in a computer-readable storage medium, such as storage unit 408. In some embodiments, part or all of the computer program may be loaded and / or installed on electronic device 400 via ROM 402 and / or communication unit 409. When the computer program is loaded into RAM 403 and executed by processor 401, one or more steps of the dynamic token-based access control method described above may be performed. Alternatively, in other embodiments, processor 401 may be configured to perform the dynamic token-based access control method by any other suitable means (e.g., by means of firmware).

[0111] Various embodiments of the systems and techniques described above herein can be implemented in digital electronic circuit systems, integrated circuit systems, field-programmable gate arrays (FPGAs), application-specific integrated circuits (ASICs), application-specific standard products (ASSPs), systems-on-a-chip (SoCs), payload-programmable logic devices (CPLDs), computer hardware, firmware, software, and / or combinations thereof. These various embodiments may include implementations in one or more computer programs that can be executed and / or interpreted on a programmable system including at least one programmable processor, which may be a dedicated or general-purpose programmable processor, capable of receiving data and instructions from a storage system, at least one input device, and at least one output device, and transmitting data and instructions to the storage system, the at least one input device, and the at least one output device.

[0112] Computer programs used to implement the methods of the present invention may be written in any combination of one or more programming languages. These computer programs may be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device, such that when executed by the processor, the computer programs cause the functions / operations specified in the flowcharts and / or block diagrams to be performed. The computer programs may be executed entirely on a machine, partially on a machine, or as a standalone software package, partially on a machine and partially on a remote machine, or entirely on a remote machine or server.

[0113] In the context of this invention, a computer-readable storage medium can be a tangible medium that may contain or store a computer program for use by or in conjunction with an instruction execution system, apparatus, or device. A computer-readable storage medium may include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, apparatus, or devices, or any suitable combination thereof. Alternatively, a computer-readable storage medium may be a machine-readable signal medium. More specific examples of machine-readable storage media include electrical connections based on one or more wires, portable computer disks, hard disks, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fibers, portable compact disk read-only memory (CD-ROM), optical storage devices, magnetic storage devices, or any suitable combination thereof.

[0114] To provide interaction with a user, the systems and techniques described herein can be implemented on an electronic device having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to the user; and a keyboard and pointing device (e.g., a mouse or trackball) through which the user provides input to the electronic device. Other types of devices can also be used to provide interaction with the user; for example, feedback provided to the user can be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user can be received in any form (including sound input, voice input, or tactile input).

[0115] The systems and technologies described herein can be implemented in computing systems that include backend components (e.g., as data servers), or middleware components (e.g., application servers), or frontend components (e.g., user computers with graphical user interfaces or web browsers through which users can interact with implementations of the systems and technologies described herein), or any combination of such backend, middleware, or frontend components. The components of the system can be interconnected via digital data communication of any form or medium (e.g., communication networks). Examples of communication networks include local area networks (LANs), wide area networks (WANs), blockchain networks, and the Internet.

[0116] A computing system can include clients and servers. Clients and servers are generally located far apart and typically interact through communication networks. The client-server relationship is created by computer programs running on the respective computers and having a client-server relationship with each other. The server can be a cloud server, also known as a cloud computing server or cloud host, which is a hosting product within the cloud computing service system to address the shortcomings of traditional physical hosts and VPS services, such as high management difficulty and weak business scalability.

[0117] In one embodiment, the present invention further includes a computer program product, which includes a computer program that, when executed by a processor, implements the dynamic token-based access control method of any embodiment of the present invention.

[0118] In implementing the computer program product, computer program code for performing the operations of this invention can be written in one or more programming languages ​​or a combination thereof. Programming languages ​​include object-oriented programming languages ​​such as Java, Smalltalk, and C++, as well as conventional procedural programming languages ​​such as C or similar languages. The program code can be executed entirely on the user's computer, partially on the user's computer, as a standalone software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In cases involving remote computers, the remote computer can be connected to the user's computer via any type of network—including a local area network (LAN) or a wide area network (WAN)—or can be connected to an external computer (e.g., via the Internet using an Internet service provider).

[0119] It should be understood that the various forms of processes shown above can be used, with steps reordered, added, or deleted. For example, the steps described in this invention can be executed in parallel, sequentially, or in different orders, as long as the desired result of the technical solution of this invention can be achieved, and this is not limited herein.

[0120] The specific embodiments described above do not constitute a limitation on the scope of protection of this invention. Those skilled in the art should understand that various modifications, combinations, sub-combinations, and substitutions can be made according to design requirements and other factors. Any modifications, equivalent substitutions, and improvements made within the spirit and principles of this invention should be included within the scope of protection of this invention.

Claims

1. An access control method based on dynamic tokens, characterized in that, include: In response to receiving an access request from a target user, obtain the current status data of the target area, the target user identifier, and preset security information; A dynamic token is generated based on the status data, the target user identifier, and the security factor information; The dynamic token is verified to generate a token verification result, and a comprehensive trust score is determined based on the token verification result and the status data. Based on the comprehensive trust score and the security level of the target area, a dynamic permission level is determined, and the access permissions of the target user are determined according to the dynamic permission level.

2. The method according to claim 1, characterized in that, The step of generating a dynamic token based on the status data, the target user identifier, and the security factor information includes: The correction factor is calculated based on the state data, and the target user key is generated based on the target user identifier and the preset original key; Generate a token seed based on the current timestamp, the security factor information, and the correction factor; The dynamic token is generated based on the target user key and the token seed.

3. The method according to claim 2, characterized in that, The step of verifying the dynamic token and generating a token verification result includes: The verification time window is determined based on the correction factor and the security factor information; Within the verification time window, multiple reference tokens are generated; The dynamic token is matched and verified with each of the reference tokens to obtain the token verification result.

4. The method according to claim 1, characterized in that, The step of determining the comprehensive trust score based on the token verification result and the status data includes: A token verification score is determined based on the token verification result, and a device security score is determined based on the status data. Obtain the biometric verification score and behavioral pattern verification score of the target user; The token verification score, the biometric verification score, the behavioral pattern verification score, and the device security score are weighted and calculated, and then corrected by combining the security factor information and the correction factor to obtain the comprehensive trust score.

5. The method according to claim 1, characterized in that, The determination of dynamic permission levels based on the comprehensive trust score and the security level of the target area includes: Determine the basic permission level pre-set according to the security level of the target area, and obtain the device criticality level of the target device in the access request; The overall credibility score is compared with a preset threshold, and the permission level adjustment amount is calculated based on the comparison result. The dynamic permission level is determined based on the basic permission level, the permission level adjustment amount, and the device criticality level.

6. The method according to claim 1, characterized in that, The method further includes: During the target user's access process, the target user's behavior data and the device status changes in the target area are monitored in real time. When abnormal behavior data or device status changes are detected, a security warning is triggered and preset security actions are performed.

7. An access control device based on dynamic tokens, characterized in that, include: The acquisition module is used to respond to the access request received from the target user and acquire the current status data of the target area, the target user identifier, and preset security factor information. The generation module is used to generate a dynamic token based on the status data, the target user identifier, and the security factor information; The verification module is used to verify the dynamic token, generate a token verification result, and determine a comprehensive trust score based on the token verification result and the status data. The determination module is used to determine the dynamic permission level based on the comprehensive trust score and the security level of the target area, and to determine the access permissions of the target user according to the dynamic permission level.

8. An electronic device, characterized in that, The electronic device includes: At least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores a computer program executable by the at least one processor, the computer program being executed by the at least one processor to enable the at least one processor to perform the dynamic token-based access control method according to any one of claims 1-6.

9. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores computer instructions that cause a processor to execute the access control method based on dynamic tokens as described in any one of claims 1-6.

10. A computer program product, characterized in that, The computer program product includes a computer program that, when executed by a processor, implements the access control method based on dynamic tokens as described in any one of claims 1-6.

Images