基于信任度属性的访问控制策略合成

发布时间：2018-01-01 01:29

本文关键词：基于信任度属性的访问控制策略合成　出处：《计算机应用研究》2016年07期 　论文类型：期刊论文

【摘要】：运用代数系统来形式化地描述、推理和演算跨域环境下基于属性的访问控制策略合成,是解决策略冲突和合成的有效途径。通过引入由上下文环境及时间衰减性动态判决的信任度属性,增加信任度投票算子,并将属性授权项扩展为由主体属性、客体属性、环境属性、信任度属性和操作属性构成的五元组,提出了基于信任度属性的策略合成代数系统。通过四个安全域中的策略合成实例分析,详细阐述了利用信任度属性值实时监控访问请求主体在授权后访问行为的安全性,并展示了策略合成具有更强的描述能力、灵活性和安全性。最后使用策略合成表达式的代数性质来验证策略合成的结果。
[Abstract]:An algebraic system is used to formally describe, infer and compute attribute-based access control policy composition in cross-domain environments. It is an effective way to resolve policy conflict and composition. By introducing the trust attribute which is decided dynamically by context and time attenuation, the trust voting operator is added, and the attribute authorization item is extended to the subject attribute. A five-tuple set composed of object attribute, environment attribute, trust attribute and operation attribute is proposed, and a policy synthesis algebra system based on trust attribute is proposed. An example of policy composition in four security domains is analyzed. The security of the access behavior of the access request subject after authorization is described in detail by using the trust attribute value, and it is shown that the policy composition has a stronger ability to describe the behavior of the access request subject after authorization. Flexibility and security. Finally, the algebraic properties of policy composition expressions are used to verify the results of policy composition.
【作者单位】：河南理工大学计算机科学与技术学院;
【基金】：河南省科技厅重大科技攻关项目(132102210123) 河南省教育厅重大科技攻关项目(13A520321) 河南理工大学博士基金资助项目(72515/194)
【分类号】：TP393.08
【正文快照】： 0引言随着网络的快速发展,各种基于互联网的新兴应用对分布式系统间互操作的需求越来越迫切。这些新的应用大多处于分布状态,需要相互协作、共享,在异构环境下需要进行跨域的安全访问。对于访问控制模型的选择,大多采用基于属性的访问控制模型,它可以更加灵活、更加细粒度地表

【相似文献】