Abstract:
Aiming at solving security access control issues such as frequent user authentication and unauthorized access faced by power micro-applications, this paper proposes a dyn...Show MoreMetadata
Abstract:
Aiming at solving security access control issues such as frequent user authentication and unauthorized access faced by power micro-applications, this paper proposes a dynamic access control model for power micro-applications. This model overcomes the shortcomings of static allocation of traditional access control policies, and applies trust evaluation and access control to micro-applications. User access rights can be dynamically adjusted according to user requests and service status to ensure system security. This paper proposes a multi-level trust evaluation indicators for micro-applications and a trust threshold setting algorithm, which realizes fine-grained dynamic trust perception and dynamic adjustment of user permissions. In addition, through the secondary development of the Application Programming Interface (API) gateway, this paper not only unifies the identity authentication methods between different micro-applications, but also strengthens the existing security protection. Simulation experimental results show that our model can effectively adjust user permissions dynamically, identify potential malicious users, and reject or downgrade access of malicious users, thereby achieving secure access control for power micro-applications and enhancing the security of accessing microservice.
Published in: 2023 2nd International Conference on Advanced Electronics, Electrical and Green Energy (AEEGE)
Date of Conference: 26-28 May 2023
Date Added to IEEE Xplore: 09 November 2023
ISBN Information: