Architecture of the software system of confidential access to information resources of computer networks

The paper presents a formalized model of the architecture of a software system that provides confidential access to the information resources of computer networks amid the high dynamism of network infrastructures, the increasing complexity of the information environment, and the heightened requirements for protecting user privacy. The proposed architecture is grounded in the concepts of modularity, openness, and unified software interfaces, which together ensure compatibility with heterogeneous deployment environments. The functional subsystems integrate multi-level authentication, cryptographic encryption, attribute-based access control, anomaly detection in user behavior, and active access monitoring based on artificial-intelligence mechanisms. A mathematical model for assessing the degree of confidentiality of access has been developed, enabling quantification of the security level of information objects in accordance with Zero Trust Architecture standards. The practical significance lies in the architecture’s applicability to information systems with stringent confidentiality demands while meeting institutional and regulatory oversight requirements.