Access security control method and device

Abstract

The invention provides a method and a device for controlling access security, wherein the method comprises the steps of establishing semantic web technology-based domain knowledge bases (including a domain ontology base, a domain example base and a domain rule base) and access control knowledge bases (including an access control ontology base, an access history ontology base and an access control policy rule base), when a user succeeds in accessing resources in the domain knowledge bases, recording the historical contents accessed by the user by an attribute example embodying method and generating an access control policy rule simultaneously, when the same user requests for accessing to the resources in the domain knowledge bases again, determining whether the access content of the user at the present time and the historical content accessed by the user previously break the made access policy rule, and if breaking the made access policy rule, rejecting the access request of the user at the present time, otherwise, allowing the access request of the user at the present time. The method and the device can be used for solving the security and privacy disclosure problems caused by context linkage between the contents accessed a plurality of times by the same user.

Description

technical field [0001] The present invention relates to the technical field of social network services, and more specifically, relates to an access security control method and device for preventing access security and privacy leakage problems caused by the association between content accessed multiple times by the same user. Background technique [0002] Social networking systems (SNS) are increasingly becoming an important type of online application, which can facilitate online social interaction and information sharing among a large number of users. Every SNS system adopts various methods to encourage users to expand their social relationship through mutual interaction and content sharing. [0003] However, with the expansion of users' social relationships, users continue to generate content and information into these systems. These contents and information include both explicit static information, such as uploading a photo, a document, etc. Behavior information, such as ...

AI Technical Summary

Problems solved by technology

[0010] In view of the above problems, the purpose of the present invention is to provide an access security control method and device to solve the problem of user privacy leakage caused by the context association between multiple accesses by the same user

Images