How to build the flask security module

Abstract

The invention provides a Flask safety module, a construction method and a mobile Web system. The Flask safety module comprises a safety server, an object manager and an access vector buffer, wherein the safety server is used for providing a safety strategy decision, keeping mapping between a safety identifier and a safety context, allocating the safety identifier to a newly established object, controlling contents of the access vector buffer to be correct and consistent; the object manager is respectively in communication connection with the safety server, the access vector buffer and a hook in the mobile Web system, and is used for providing an interface for carrying out re-access, marking and multi-instance decision from one safety server, providing one access vector buffer to allow theobject manager to buffer an access decision result and providing the object manager to receive and process a safety strategy change notification, wherein the multi-instance decision stipulates which member of a multi-instance resource set is accessed to by a specific request; and the access vector buffer is used for buffering a preset safety strategy. The problem of poor safety caused by a case that an existing mobile Web system adopts discretionary access control can be solved.

Description

technical field [0001] The invention relates to the technical field of mobile device information security, in particular to a method for constructing a Flask security module. Background technique [0002] At present, a capability (capability) system is introduced into the security architecture of the operating system, and the main goal of the capability system is to solve the super-user problem. The components of a capability include: an identifier used to identify an object, fields defining the type of object, and fields defining access rights. Capabilities can be regarded as protected names of objects. Different systems may use capabilities in different ways, but capabilities all have the following properties: (1) Capabilities are the names used by objects within the scope of the system. are valid and unique within the entire system. (2) A capability must contain a part to determine the access rights allowed by the capability to the object named after it; (3) A capabilit...

AI Technical Summary

Problems solved by technology

[0005] In order to solve the above-mentioned technical problems, the embodiment of the present invention provides a Flask security module, a construction method and a mobile Web system, which can solve the problem of insufficient security caused by the common use of autonomous access control in current mobile Web systems

Images