Flexible micro-service security access control method and system

Abstract

The invention discloses a flexible micro-service security access control method and system. The system is composed of a micro-service API gateway, a lightweight micro-service access token, a securitypolicy service and policy template, a unified permission service, a Redis cluster, a micro-service configuration center and a Docker container security policy. A security policy template supporting aconventional security policy and a self-defined security policy is flexibly defined, flexible security access control is better realized, and instant release and application of the security policies are realized through unified configuration service and message bus service. A layered interception filtering mode is adopted in the micro-service API gateway, and safety access control and fault tolerance are better achieved through combination of links such as pre-filtering, routing, post-filtering and exception handling and a safety strategy. In the aspect of the service access token, the lightweight service access token is dynamically generated in combination with a security access control strategy, so that the operability and performance of security access control are enhanced, and meanwhile, the flexibility of micro-service security access control is improved.

Description

technical field [0001] The invention relates to the technical field of computer software, in particular to a flexible microservice security access control method and system. Background technique: [0002] The microservice architecture and its open source technology are becoming more and more mature, and have gradually become the mainstream technical architecture in the Internet and enterprise-level projects. With the refinement of domain service design based on the microservice architecture, more independent microservice processes have emerged. The frequency of microservice calls is more frequent, and stateless microservice call requests require authentication every time. When a large number of users access concurrently, it will cause performance bottlenecks in authentication services. How to ensure service performance while ensuring stateless services Inter-security access control is a key issue faced by the microservice security architecture. [0003] Currently, four main...

AI Technical Summary

Problems solved by technology

[0005] The purpose of the present invention is to provide a flexible micro-service security access control method and system to solve the defect of lack of flexible adaptive security access control strategy in the prior art

Images