Authorization method and device, authorization platform and storage medium

Abstract

The embodiment of the invention relates to an authorization method and device, an authorization platform and a storage medium. The method comprises the steps that a first authorization request of a bastion host is received through an authorization platform, wherein the authorization request comprises a unique identifier of the bastion host and information of an authorization range; the authorization platform sends the first authorization request of the bastion host to an authorization server, so that the authorization server performs authorization verification based on the unique identifier of the bastion host and the information of the authorization range; and then the authorization platform receives an authorization notification returned by the authorization server after the authorization verification is passed and sends the authorization notification to the bastion host. According to the scheme provided by the invention, the bastion host and the authorization server under different networks are linked by setting the authorization platform capable of communicating with the bastion host and the authorization server under different networks, so that authorization and unified management of the bastion host under different network environments are realized, and the flexibility and security of authorization management are improved.

Description

technical field [0001] The embodiments of the present disclosure relate to the technical field of data security, and in particular to an authorization method, device, authorization platform, and storage medium. Background technique [0002] As a security audit system, the bastion host is usually used in a specific network to ensure that the network and data are not invaded and destroyed by external and internal users. The bastion host is mainly used to manage assets, so the number of manageable assets is the most important value of the bastion host, and the number of manageable assets is determined by authorization. [0003] In related technologies, the bastion host can be authorized through an authorization server, and in this case, the bastion host and the authorization server must be in the same network environment. However, if multiple bastion hosts are deployed in different regions, the network between different bastion hosts is not connected, and the authorization ser...

AI Technical Summary

Problems solved by technology

However, if multiple bastion hosts are deployed in different regions, the network between different bastion hosts is not connected, and the authorization server cannot communicate with the bastion host, the authorization server cannot authorize the bastion host.

Images