Blockchain-based SDP access control method and apparatus

A method for blockchain-based access control of Software Defined Perimeter (SDP), comprising:

• receiving, by a blockchain system node, to-be-verified information transmitted by an SDP connection accepting host, the to-be-verified information comprising host information and a supported connection policy of the SDP connection accepting host;
• verifying, by the blockchain system node, the to-be-verified information and recording the information into a blockchain ledger after the verification is successful;
• receiving, by the blockchain system node, an identity authentication request submitted by an SDP connection initiating host;
• verifying, by the blockchain system node, the identity authentication request submitted by the SDP connection initiating host, and receiving, by the blockchain system node, a search request for a list of SDP connection accepting hosts accessible to the SDP connection initiating host transmitted by the SDP connection initiating host after the verification is successful;
• and
• verifying, by the blockchain system node, the search request, searching, by the blockchain system node, for the list of SDP connection accepting hosts accessible to the SDP connection initiating host, and recording, by the blockchain system node, the list of SDP connection accepting hosts into the blockchain ledger after the verification is successful, such that the list of SDP connection accepting hosts accessible to the SDP connection initiating host is searched by the SDP connection accepting host from the blockchain ledger to provide an access service to the SDP connection initiating host when the SDP connection accepting host is in the list of SDP connection accepting hosts, and provide no response to the SDP connection initiating host when the SDP connection accepting host is not in the list of SDP connection accepting hosts.

A method for blockchain-based access control of Software Defined Perimeter (SDP), comprising:

• submitting, by an SDP connection initiating host, an identity authentication request to a blockchain system node;
• receiving, by the SDP connection initiating host from the blockchain system node, a verified result for the identity authentication request submitted by the SDP connection initiating host;
• transmitting, by the SDP connection initiating host to the blockchain system node, a search request for a list of SDP connection accepting hosts accessible to the SDP connection initiating host, the search request comprising the verified result of the blockchain system node for the identity authentication request submitted by the SDP connection initiating host;
• transmitting, by the SDP connection initiating host, a connection request to an SDP connection accepting host;
• receiving, by the SDP connection initiating host, an access service provided by the SDP connection accepting host in the list of SDP connection accepting hosts;
• and
• receiving, by the SDP connection initiating host, no response from the SDP connection accepting host when the SDP connection accepting host is not in the list of SDP connection accepting hosts.