An access permission management method and system for a big data cluster

Abstract

The invention belongs to the technical field of data processing, and discloses an access authority management method and system for a big data cluster, and the method comprises the steps: providing anaccess authority management system, a user synchronization assembly, an authority control plug-in, and corresponding control logic; The user information synchronization assembly installed on the machine to which the big data cluster belongs sends the user and user group information to the access authority management system at regular intervals; A system administrator customizes a corresponding authority strategy for each big data cluster, and gives various authorities such as reading, writing, checking and executing to corresponding users or user groups; The authority control plug-ins installed on the big data cluster automatically synchronize corresponding authority strategies; And the authority control plug-in authenticates the big data cluster when the user accesses the big data cluster, and controls the access authority of the user according to the defined authority strategy. According to the invention, through adoption of rigorous authority strategy logic, the purpose of big datacluster access authority control is achieved.

Description

technical field [0001] The invention belongs to the technical field of data processing, and in particular relates to an access authority management method and system for large data clusters. Background technique [0002] At present, ACL technology is commonly used in the industry to implement. ACL has certain advantages, such as intuitive expression, easy to understand, and it is relatively easy to find out all users who have access rights to a specific resource, and effectively implement authorization management. However, there are also some disadvantages. First, if there are many resources, ACL needs to set a large number of entries, and it is difficult to modify, and it is also difficult to achieve a consistent control policy within the entire organization. Second, it is not easy to implement the principle of least privilege by simply using ACL. And complex security policies; in addition, lack of auditing functions, the record of resource access has not formed an audit. ...

AI Technical Summary

Problems solved by technology

[0006] (1) In the prior art, the authority policy is not used as a unit, and a complete policy tree is not used to implement rigorous authority control logic, resulting in the inability to effectively control the access authority of large data clusters

[0007] (2) When managing rights for many big data components, it is difficult to maintain a large number of table items, and the granularity of access rights control is not fine enough

[0008] (3) Lack of an effective audit mechanism. When users access big data resources, there is no way to record relevant operation information and feedback information given by the system in real time, resulting in missing logs

Images