关键词: 零信任, IAM, 动态风险评估, 区块链, 数据安全

Abstract: In today’s identity authentication and access control technologies, most of them are authorized based on roles, once an attacker obtains the control right of an account corresponding to the role, he can use the role authority of the account to perform malicious operations without further authentication. Based on this defect, this paper proposes a dynamic risk assessment mechanism and algorithm based on the zerotrust architecture. In the user identity authentication stage, the algorithm is used to calculate the authentication factor provided by the user to obtain the user’s data security risk degree value on the Internet, and dynamically control the user’s access according to the data security risk degree value. In the process of access control, blockchain technology and algorithms are used to generate an undeniable and traceable user access label for this access. The experimental results show that the architecture technology can realize dynamic and more secure authentication and access control.

Key words: zero trust, IAM, dynamic risk assessment, blockchain, data security