This invention discloses a dynamic role-based
access control method based on dual-source trust fusion to address the high risk of unauthorized access caused by static role
authorization in dynamic network environments. The method first receives user access requests and extracts contextual risk features. Then, it extracts historical user interaction indicators and calculates dynamic behavior trust scores based on time decay. External feedback scores are obtained,
outlier scores are removed, and weighted aggregation yields robust feedback trust scores. Then, based on
data consistency and
divergence,
adaptive weighting is applied to derive a comprehensive
trust score. Finally, the comprehensive
trust score is coupled with the contextual risk value to determine the trust gap, and based on this, full
authorization, partial
authorization downgrade based on sensitivity truncation, or access denial are performed. This invention abandons static fixed weights, enhancing the robustness of trust assessment in extreme scenarios; and it pioneers a partial authorization
pruning mechanism, effectively reducing the
false rejection rate of legitimate users while ensuring security, achieving a balance between
system availability and the principle of least privilege.