A method and device for controlling resource access, wherein the method includes: receiving a requester's access request for a target resource; performing verification for the access request; and determining whether to allow the requester to access the target resource; wherein the verification for the access request includes: determining validity of a service state related to the target resource.