基于零信任的动态访问控制技术研究  

Research on Dynamic Access Control Technology Based on Zero Trust

作　　者：包森成 计晨晓 BAO Sencheng;JI Chenxiao(China Mobile Group Zhejiang Co.,Ltd.,Hangzhou 310000,China)

机构地区：[1]中国移动通信集团浙江有限公司,浙江杭州310000

出　　处：《移动通信》2024年第1期132-136,共5页Mobile Communications

摘　　要：传统的访问控制技术不能有效满足泛在接入的移动接入需求,提出一种基于零信任的动态访问控制技术。该技术通过持续监控大规模访问主体行为,结合主体行为、任务类型、服务、资源类型和网络安全状态对用户进行动态信任评估并根据信任值对访问主体进行动态授权,从而提高系统对恶意行为的识别率,提升企业数据资源的安全性。仿真表明,该方法能够适应访问主体在持续访问控制方案下的细粒度访问控制和动态授权管理,提升移动办公等应用的安全性。Traditional access control technologies are insufficient in effectively meeting the ubiquitous access requirements of mobile connectivity.This paper proposes a dynamic access control technology based on the Zero Trust model.This method continuously monitors the behavior of many access subjects,dynamically assesses trust based on subject behavior,task type,services,resource types,and network security status,and grants dynamic authorization according to the trust value.Based on the trust value,it dynamically authorizes access subjects,thereby improving the detection rate of malicious behavior and enhancing the security of enterprise data resources.Simulations indicate that this method can adapt to fine-grained access control and dynamic authorization management under continuous access control schemes,thus enhancing the security of applications such as mobile office environments.

关 键 词：零信任 动态访问控制 授权管理 

分 类 号：TN929.5[电子电信—通信与信息系统]