Zero-trust network access control method and system based on time window dynamic switching

The invention discloses a zero-trust network access control method and system based on time window dynamic switching, and the system comprises an identity authentication module, a dynamic authorization module, an access control module, a safety auditing module, a risk assessment module, a strategy m...

Ausführliche Beschreibung

Gespeichert in:
Bibliographische Detailangaben
Hauptverfasser: DENG GAOJIAN, YIN SHAODONG, MA DUOYAO, LI YIHUA
Format: Patent
Sprache:chi ; eng
Schlagworte:
Online-Zugang:Volltext bestellen
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
Beschreibung
Zusammenfassung:The invention discloses a zero-trust network access control method and system based on time window dynamic switching, and the system comprises an identity authentication module, a dynamic authorization module, an access control module, a safety auditing module, a risk assessment module, a strategy management module, and a log recording module. The method comprises the following steps: 1) performing identity authentication and risk assessment on a user according to multi-dimensional information such as user identity, equipment, application and data; 2) according to an access request of a user, dynamically judging whether the user has the authority to access a target resource or not; 3) if the user has the authority to access the target resource, dynamically adjusting an access strategy according to factors such as access behaviors and environmental risks of the user; according to the zero-trust network access control method based on time window dynamic switching, the zero-trust network access control method ba