Access control method, device, computer device and computer-readable storage medium

Abstract

The invention provides an access control method, device, computer equipment and computer-readable storage medium. The access control method includes: receiving an access request; determining the entity layer corresponding to the access request, wherein the entity layer includes four access entities, which are respectively an access user, an access device, an access proxy service, and a proxy service device; for each access entity, Obtain the security assessment data of the access entity, and calculate the security assessment value of the access entity according to the security assessment data; determine the security assessment value of the access request according to the security assessment values ​​of all the access entities; and when the security assessment value of the access request is less than the security threshold, Send a command to block access requests to the access proxy service. The present invention can reduce the complexity of authority judgment.

Description

technical field [0001] The present invention relates to the technical field of information security, and in particular, to an access control method, apparatus, computer device and computer-readable storage medium. Background technique [0002] Traditional access control methods are usually based on physical boundaries. With cloud services, mobile terminals, and web sites, physical boundaries are gradually disintegrating. At the same time, the diversification of external attacks and the intensification of internal threats are developing in parallel. Security measures at the border are failing. [0003] In order to improve the security effectiveness of access control in the existing environment, the prior art proposes an access control method. In this access control method, the access object is not directly exposed to the access subject, but the relationship between the access object and the access subject is The trusted proxy service is set up between the two, and the point ...

AI Technical Summary

Problems solved by technology

[0004] However, the inventors found that, in order to improve the security of the access object, more trust evaluation rules need to be set when performing authority judgment, and each trust evaluation is responsible for being independent and unrelated to each other, which makes the authority judgment complicated. Therefore, an access method is provided. Control methods, devices, computer equipment, and computer-readable storage media to reduce the complexity of authority judgment have become a technical problem that needs to be solved urgently in this field

Images