Access control system and method based on risk-based reasoning for public cloud service

摘要

The present invention relates to risk inference based access control system and method for a public cloud service. The risk inference based access control system for a public cloud service comprises: a basic DB unit respectively storing and managing behavior information of a user or a device that accesses the public cloud service as behavior information for each user and behavior information for each device; a risk analysis unit storing and managing the information as behavior risk information for each user and behavior risk information for each device based on predetermined risk analysis criteria; a correlation analyzing unit performing correlation analysis on the information using the information stored in the basic DB unit and storing and managing correlation analysis results; a risk inference unit calculating, storing, and managing the degree of access risk for each user and the degree of access risk for each device using the correlation analysis results and the risk information; and a central control unit generating an access control signal for each user or for each device using the degrees of risk and respectively controlling the users access or the devices access to the public cloud service according to the access control signal, such that the access to the public cloud service is effectively controlled to facilitate the management on signs and risks of security accidents.