基于应用区域边界体系结构的多主体访问控制安全模型  

A Security Model of Multi-users Access Control Based on the Architecture of Application Area Boundary

作　　者：郭瑞明 刘益和[2] 戴宗坤[1] 

机构地区：[1]四川大学信息安全研究所,四川成都610064 [2]内江师范学院计算机与信息科学系,四川内江641112

出　　处：《四川大学学报（工程科学版）》2008年第4期115-119,共5页Journal of Sichuan University (Engineering Science Edition)

基　　金：国家973计划资助项目(1999035801)

摘　　要：为解决应用区域边界安全体系结构中的多主体访问控制安全问题,分析了应用区域边界的安全体系结构,利用BLP模型、B iba模型和RBAC模型的基本性质,针对该类安全体系结构的数据读/写操作和数据传送问题,详细定义并描述了创建客体规则、创建主体规则和数据传送中发送/接收规则。形式化证明了给出的描述规则是合理的、安全的,由这些规则组成的基于应用区域边界的安全体系结构模型是安全的。In order to promote the security of multi-users access,the properties of the BLP model,Biba model and RBAC model were given,and the problems of data write/read operation and data transmission in the security architecture of application area boundary were described.To solve the problems,the rules of creating objects,creating subjects and sending/receiving data in transmission were presented,and the rationality and security of the rules were proved formally.It was showed that the security architecture model o...

关 键 词：信息安全体系结构 BLP模型 BIBA模型 RBAC模型 粒度控制 并发行为 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]