基于可信度的细粒度RBAC访问控制模型框架  

Trust-degree based fine-grained RBAC framework

作　　者：刘宏月[1,2] 阎军智[1,2] 马建峰[1,2] 

机构地区：[1]西安电子科技大学计算机学院,陕西西安710071 [2]计算机网络与信息安全(教育部)重点实验室,陕西西安710071

出　　处：《通信学报》2009年第S1期51-57,共7页Journal on Communications

基　　金：国家高技术研究发展计划("863"计划)基金资助项目(2007AA01Z429;2007AA01Z405);国家自然科学基金重点资助项目(60633020);国家自然科学基金资助项目(60573036;60702059;60503012)~~

摘　　要：在标准RBAC基础上引入授权信任约束条件,构造一种基于用户可信度的细粒度访问控制模型TBFAC;给出了TBFAC的模型框架;设计了一种综合多种因素的用户可信度评估方法;并简要描述了模型的应用问题。TBFAC机制将信任理论应用于访问控制技术,实现了实体信任与行为信任的融合,为访问控制技术的应用提供了一种新的解决方案。A trust constraint on the permission authorization was introduced into the standard RBAC model to formalize a user trust-degree based fine-grained access control model(TBFAC).The framework of TBFAC was presented;A method to compute user's trust-degree according to a number of factors was designed;Finally, the application of TBFAC in distributed open system was discussed in brief.TBFAC melts behavior trust into identity trust, and provides a new solution for the applications of access control techniques.

关 键 词：访问控制 细粒度 可信度 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]