Access control system and method based on risk-based reasoning for public cloud service

摘要

The present invention, more specifically, the public cloud service user (user) or a device (device) identification information for each user-specific identification information of the approaching of the danger inference-based access control system and method for a public cloud service , basic DB unit 100, and a database in a device-specific identification information storage and management and stores and manages the behavior information of the user or device access to the public cloud service to each user-specific behavior information, device-specific behavior information, group on the basis of risk analysis criteria are set, by the basic DB section risk information in the user-specific behavior information and the device-specific actions that stores information on the judgment 100, the risk per each user by exponential risk information determined behavior information, and the device A risk analysis unit 200 for storing and managing the risk information as action risk information , The correlation analysis result is stored by using the per-user behavior information, the device-specific behavior information, the user-specific action risk information stored in the risk analysis unit 200, and the device-specific action risk information And a correlation analysis unit 300 for managing the correlation analysis result, the correlation analysis result stored in the correlation analysis unit 300, the behavior risk information for each user stored in the risk analysis unit 200, and the action risk information for each device The risk inferencing unit 400 calculates and stores the access risk and the access risk according to each user , and the access risk according to the user, which is calculated by the risk inferring unit 400, or generating an access control signal for each device, and access by each user or device in accordance with said access control signal to the public cloud service It relates to the risk of speculation based access control system for public cloud services, comprising a central control unit (500).