移动网络与云环境下的重认证和访问控制策略研究

Research on Authentication and Access Control Strategy in Mobile Network and Cloud Environment

随着手机、电脑等移动设备的普遍使用,人们越来越习惯于用智能设备存储个人信息。但近些年来,由于移动设备丢失导致的用户隐私泄露事件屡见不鲜,如何实现互联网云环境下身份认证以及信息安全性的提高已经成为人们极为关注的问题。基于这个问题本文提出了一种访问策略的更新,设计动态演化的隐式重认证方法,使得智能终端能够持续地识别用户是否合法,对抗恶意用户的模拟攻击,防止未授权用户造成数据泄露。通过分析及研究以期为相关工作者提供一定的帮助。

With the widespread use of mobile phones,computers and other mobile devices,people are more and more accustomed to us⁃ing smart devices to store personal information.However,in recent years,user privacy disclosure incidents caused by the loss of mobile devices are not uncommon.How to achieve identity authentication and the improvement of information security in the Internet cloud en⁃vironment has become an issue of great concern.Based on this problem,this paper proposes an update of access policy and designs an implicit re-authentication method with dynamic evolution,so that the intelligent terminal can continuously identify whether the user is legitimate and resist the simulation attack of malicious users.to prevent data disclosure caused by unauthorized users.Through analysis and research in order to provide some help for related workers.