A multi-dimensional state-aware dynamic access control method

Abstract

The present invention proposes a multi-dimensional state-aware dynamic access control method, which can identify the user's own state and also identify other unknown multi-dimensional states of the user, thereby achieving more accurate access control. This method mainly includes the following steps: Step 1: Obtain the relevant attributes of the information requested by the user; Step 2: Calculate the state of the request subject itself; Step 3: Through the flow sensing user request other states; Step 4: Synthesize the result of its own state and the result of flow sensing; Step 5: Make a decision based on the comprehensive evaluation result; Step 6: After the decision is fed back from the actual application, adjust the threshold value of the risk occupation in the comprehensive evaluation module; the present invention regards attributes such as subject, object, and context as data streams, and through historical The anomaly detection of the data flow of the window evaluates the risk value of the current access. The method can realize dynamic access control under the dynamic cloud ring mirror, thereby protecting the security of massive resources in the cloud computing environment.

Description

technical field [0001] The invention relates to the technical field of cloud computing, in particular to a multi-dimensional state-aware dynamic access control method. Background technique [0002] In the cloud computing environment, various resources are dynamically connected to the Internet. Since the Internet is an open network environment, interaction between nodes is inevitable, which involves security issues. Therefore, while enjoying the convenience brought by cloud computing At the same time, its security should also be considered. Access control technology is the most basic security method in the cloud computing environment, which is used to protect various resources from being used by unidentifiable systems and unauthorized users. However, the resources in the cloud computing environment are not only huge in scale but also dynamic, and the security requirements in the cloud computing environment are also different from those of traditional computers. The insecurit...

AI Technical Summary

Problems solved by technology

However, in these access control models for risk assessment, the risk assessment module still adopts static risk policies in essence. This method requires security administrators to configure not only traditional rule policies but also risk rule policies, although it enhances the The security of access control, but it also increases the burden on security managers

Images