基于行为的多级访问控制模型

发布时间：2018-01-21 21:20

本文关键词： 多级安全行为权限伸缩访问控制 BLP模型　出处：《计算机研究与发展》2014年07期 　论文类型：期刊论文

【摘要】：通信、计算机、多媒体等技术的发展加速了信息的传播,网络上传播的数据呈现出多维化的特点.实行多级安全管理既可确保信息准确传递,又可保证数据的机密性和完整性.传统的多级安全模型已经与基于角色的访问控制(role-based access control,RBAC)等经典访问控制模型相结合,在一定程度上解决了多级安全访问控制的问题.但是,现有的多级安全访问控制机制缺少对时空要素的考虑,不适用于目前用户在任意时间、地点进行访问的多级授权管理,因此,如何实现具有时空特征的多级安全访问控制机制已成为亟待解决的问题.首先,针对性提出了一种基于行为的多级安全访问控制模型,实现了BLP模型与基于行为的访问控制(action-based access control,ABAC)模型的有机结合,将原有主体的安全等级、范畴的描述扩展到行为上.其次,为了解决用户权限依据时空伸缩的问题,在BLP模型的基础上细化了行为的安全级别,定义了行为读安全级别和行为写安全级别,同时描述了基本操作的安全规则,在保证数据机密性的基础上兼顾完整性.最后,结合提出的模型给出了相应的实施方案.基于行为的多级安全访问控制模型能够面向目前的复杂网络环境,结合时态、环境等时空因素,解决访问控制过程中用户、数据分级管理和访问控制问题.
[Abstract]:Communication, computer, multimedia technology has accelerated the development of information communication, network communication data shows the characteristics of multi-dimensional multi-level security management. Not only can ensure accurate information, and can ensure the confidentiality and integrity of data. The traditional multilevel security model and role-based access control (role-based access control, RBAC) and other classic access control model are combined to a certain extent to solve the multi-level access control problem. However, the existing multilevel secure access control mechanism of the lack of time and space factors into account, is not suitable for the current user at any time, multi-level authorization management, access to the site so how to realize the time the characteristics of the multi-level security access control mechanism has become an urgent problem to be solved. Firstly, puts forward a multilevel security access control model based on behavior, The implementation of BLP model and behavior based access control (action-based access control, ABAC) organic combination model, the security level of the original subject, category description is extended to behavior. Secondly, in order to solve the problem of user rights on the basis of temporal expansion, on the basis of the BLP model to refine the security level of behavior, the definition of read and write behavior of security level behavior level of security, and describes the basic safety rules of operation, while ensuring the data confidentiality and integrity both. Finally, combining the model put forward the corresponding implementation plan. The multi-level access control model for complex network environment, based on the current combination of tense environment the spatial and temporal factors, solve the access control in the process of user data, classification management and access control problem.

【作者单位】：综合业务网理论及关键技术国家重点实验室(西安电子科技大学);信息安全国家重点实验室(中国科学院信息工程研究所);北京电子科技学院信息安全系;
【基金】：国家自然科学基金项目(61170251) 数字版权保护技术研发工程项目(1681300000119) 国家“八六三”高技术研究发展计划基金项目(2012AA013102,2012AA01A401)
【分类号】：TP393.08
【正文快照】： 随着数字通信、网络和信息技术的进步,多网融的判定,忽略了时态、环境信息对访问授权的影响,合的通信网络逐步发展成为异构、开放的复杂系统.权限管理缺乏灵活性和通用性,无法解决主体跨域、各种网络、信息系统互联互通的趋势愈来愈明显,出跨信息系统带来的访问控制问题,不能

【参考文献】