Method and device for controlling access security

Abstract

The invention provides a method and a device for controlling access security, wherein the method comprises the steps of establishing semantic web technology-based domain knowledge bases (including a domain ontology base, a domain example base and a domain rule base) and access control knowledge bases (including an access control ontology base, an access history ontology base and an access control policy rule base), when a user succeeds in accessing resources in the domain knowledge bases, recording the historical contents accessed by the user by an attribute example embodying method and generating an access control policy rule simultaneously, when the same user requests for accessing to the resources in the domain knowledge bases again, determining whether the access content of the user at the present time and the historical content accessed by the user previously break the made access policy rule, and if breaking the made access policy rule, rejecting the access request of the user at the present time, otherwise, allowing the access request of the user at the present time. The method and the device can be used for solving the security and privacy disclosure problems caused by context linkage between the contents accessed a plurality of times by the same user.

Description

Technical field [0001] The present invention relates to the technical field of social network services, and more specifically, to an access security control method and device for preventing access security and privacy leakage problems caused by multiple accesses of the same user to the content. Background technique [0002] Social networking systems (SNS) are increasingly becoming an important type of online application, which can promote online social interaction and information sharing among a large number of users. Each SNS system uses various methods to encourage users to expand their social relationships through mutual interaction and content sharing. [0003] However, with the expansion of user social relationships, users continue to generate content and information into these systems. These content and information include both explicit static information, such as uploading a photo, a document, etc., as well as implicit The behavior information of users, such as the interact...

AI Technical Summary

Problems solved by technology

[0010] In view of the above problems, the purpose of the present invention is to provide an access security control method and device to solve the problem of user privacy leakage caused by the context association between multiple accesses by the same user

Images