Network information resource access control method and system

The invention relates to a method and a system for controlling network information resource access. The embodiment of the method for controlling the network information resource access is applied to the system for controlling the transparent network information resource access in a network application system and comprises the following steps: extracting characteristic information of data flow units which are data items for dividing data flow according to access control requirements in the network information resource access control; matching the characteristic information of the data flow units with an access control policy aggregate to acquire a matching result; and controlling the data flow units according to the matching result, filtering the data flow units which are forbidden to be accessed, and releasing the data flow units allowed to be accessed. By making use of the method and the system, the transparent fine grain access control of the network application system is achieved in the network information