A method and device for synchronizing authentication information

Abstract

This application provides a method and device for synchronizing authentication information, which are applied to agent devices in a zero-trust network. The zero-trust network adopts a regional deployment method, each region corresponds to an agent device, and each agent device is configured with a neighbor agent device; the method includes: receiving a user's access request; if the authentication information of the user is locally stored, then using the authentication information to authenticate the user, and allowing the user to access the application system requested by the access request after the authentication is passed; if the local If the user's authentication information is not stored, an authentication request is sent to the IAM system for identity authentication, so that the IAM system completes the identity authentication of the user; the authentication result fed back by the IAM system is received; if the authentication result is passed, the authentication is allowed The user accesses the application system requested by the access request; and the authentication information passed through the authentication is synchronized to the neighbor proxy device of the proxy device. This reduces the authentication pressure on the IAM system.

Description

technical field [0001] The present application relates to the field of communication technologies, and in particular to a method and device for synchronizing authentication information. Background technique [0002] The traditional network security model takes the network boundary as the protection boundary, and usually uses firewalls, DDOS, IPS and other equipment to monitor the traffic at the entrance of the enterprise, and users on business trips or branches use VPN to access the intranet. The intranet environment is considered to be safe. With the continuous advancement of technology, this traditional security system is facing challenges. On the one hand, because the internal network defense measures are often relatively weak, once an attacker breaks into the network boundary, the internal network environment will face risks such as data leakage. On the other hand, with the rise of the microservice architecture, the system composition is evolving from centralized to di...

AI Technical Summary

Problems solved by technology

However, when a user accesses other application systems in another area or even the same application system, it still needs to complete the authentication process with the IAM system again, which will cause multiple authentications for the same user to access application systems in different areas, the process is cumbersome, and the IAM system is increased. System certification pressure

Images