Access control method, system and device and computing equipment

Abstract

The invention provides an access control method, system and device and computing equipment, relates to the technical field of cloud, in particular to the field of cloud security in the technical fieldof cloud, and is used for improving the effectiveness of access control and reducing network security risks. The method comprises the following steps: in response to an access triggering operation, initiating a service access request through a target application process; obtaining process feature information of the target application process, wherein the process feature information is used for identifying the target application process; obtaining process authorization information corresponding to the target application process when the process feature information passes credible verification;and sending the service access request and the process authorization information to an admission gateway so as to release or intercept the service access request through the admission gateway according to an authentication result of the service access request, and authenticating the service access request through the authorization information.

Description

technical field [0001] The present application relates to the field of cloud technology, in particular to the field of cloud security technology, and in particular to an access control method, system, device and computing equipment. Background technique [0002] With the rapid development of Internet technology, access control technology, as one of the core means to ensure network information security, has been widely used in various application scenarios, such as cloud computing, cloud security and other application scenarios. [0003] Taking the access control scenario as an example, the related technologies generally adopt a zone-based credit control mechanism, that is, divide trust zones based on the network location of the user (such as IP (Internet Protocol, network mind) address), and perform access control. At this time, it is determined whether to intercept or release the user's access request by judging whether the network location of the user is credible. [0004...

AI Technical Summary

Problems solved by technology

[0004] In the above access control method, after confirming that the user's network location is credible, the device is allowed to enter the network. Once entering the network, the device can access internal network services through any application in the device, including some malicious codes. The ability to infiltrate the network to invade the business system, resulting in security risks in the business system

That is to say, the access control mechanism in related technologies has a relatively large network security risk, and the effectiveness of access control is low

Images