云服务中跨域访问控制模型和方法研究

发布时间：2018-05-03 04:11

本文选题：云服务 + 可信第三方　；参考：《南昌航空大学》2017年硕士论文

【摘要】：社会的发展离不开信息的传播和交互,尤其是最近几年来云计算的火热发展,导致越来越多的用户使用“云”来传播和共享信息资源。为了保证用户储存在“云”中信息资源的安全性,安全高效的跨域访问控制就变的尤为重要。目前对于跨域访问控制模型的研究主要有IRBAC2000和基于属性映射以及在它们基础之上的一些改进和拓展模型。但这些模型都不能很好的运用在云计算平台下,因此对于云平台下跨域访问控制模型的研究具有重要意义。本文主要研究的是云服务中基于第三方属性映射的跨域访问控制。在前人研究的基础之上,采用开源框架Hadoop来搭建云平台,利用基于属性映射的方法,委托可信第三方(Trusted Third Party,TTP),通过可信第三方来统一管理各个安全域之间的跨域访问策略,从而达到对数据资源安全有效的跨域访问控制。本文的主要工作和研究内容如下:(1)引入可信第三方(TTP)。首先,TTP中TVEM模块会根据主体的行为历史记录、环境以及条件等因素,计算出域间信任值以及用户和被访问域之间的信任值。然后,通过SALM模块对属性进行映射,解决因不同安全域之间对同一属性不同命名而制定多条属性映射规则的问题。最后,通过AAM模块来判断主体是否满足跨域访问条件。从而达到跨域访问控制的目的。(2)研究了TTP中TVEM、SALM和AAM功能模块的实现方法。首先,通过对各模块的分析处理,让各模块之间协调工作,保证了系统的可行性。然后,通过对云服务中基于TTP属性映射的模型的分析研究,让整个系统流程更加的直观。最后,通过对整个系统的算法进行总结,给出了算法流程,从编程的角度上实现系统中各个功能模块。(3)研究开源云平台Hadoop的搭建方法。首先,通过分析系统的需求,选择合适的软件版本。然后,安装软件、搭建服务器,并修改相应的系统配置,保证整个系统的正常运行。最后,在该平台上开发了基于TTP属性映射的跨域访问控制系统,并通过对该系统的测试来验证本文中提出的方法的可行性。
[Abstract]:The development of society can not be separated from the communication and interaction of information, especially in recent years, the hot development of cloud computing has led to more and more users to use the "cloud" to spread and share information resources. In order to ensure the security of the information resources stored in the "cloud", a secure and efficient cross domain access control is becoming more and more important. The research of cross domain access control model mainly includes IRBAC2000 and attribute based mapping and some improvement and expansion models based on them. However, these models are not well applied to the cloud computing platform. Therefore, it is of great significance to study the cross domain access control model under the cloud platform. This paper mainly studies the cloud. In the service, the cross domain access control based on the third party attributes mapped. Based on the predecessors' research, the open source framework Hadoop is used to build the cloud platform, and the trust third party (Trusted Third Party, TTP) is commissioned by the attribute mapping method, and the cross domain access strategy between each security domain is managed by a trusted third party. The main work and research contents of this paper are as follows: (1) introduce the trusted third party (TTP). First, the TVEM module in TTP will calculate the trust value between the domains and the trust value between the user and the access domain according to the behavior history, environment and conditions of the main body. The SALM module maps the attributes to solve the problem of multiple attribute mapping rules because of the different naming of the same attribute between different security domains. Finally, the AAM module is used to determine whether the subject satisfies the cross domain access condition. Thus, the purpose of cross domain access control is achieved. (2) the realization of TVEM, SALM and AAM function modules in TTP is studied. First, through the analysis and processing of each module, let the modules work together and ensure the feasibility of the system. Then, through the analysis and study of the model based on the TTP attribute mapping in the cloud service, the whole system process is more intuitionistic. Finally, the algorithm process is given through the algorithm of the whole system, and the programming process is given. On the point of view, each function module in the system is realized. (3) study the construction method of the open source cloud platform Hadoop. First, select the appropriate software version by analyzing the requirements of the system. Then, install the software, build the server, and modify the corresponding system configuration to ensure the normal operation of the whole system. Finally, the TTP attribute based on the platform is developed. The cross domain access control system is mapped, and the feasibility of the method proposed in this paper is verified by testing the system.

【学位授予单位】：南昌航空大学
【学位级别】：硕士
【学位授予年份】：2017
【分类号】：TP393.08

【相似文献】