基于云平台的政务信息系统的访问控制设计  

Design of access control in E-government system based on cloud platforms

作　　者：胡俊[1,2] 张熠[1] 黄传河[1] 

机构地区：[1]武汉大学计算机学院,湖北武汉430072 [2]武汉市政务服务中心管理办公室,湖北武汉430012

出　　处：《华中科技大学学报（自然科学版）》2013年第S2期147-151,共5页Journal of Huazhong University of Science and Technology(Natural Science Edition)

基　　金：中央高校基本科研业务费专项资金资助项目(3101003)

摘　　要：根据政务信息化的运营特点与安全需求,结合强制访问控制、基于角色的访问控制和推理通道的访问控制,为基于云中心的政务信息系统设计了一种安全的混合访问控制模型,提出了事前建立访问控制基线、事中监测与仲裁威胁、事后审计与追溯的云计算安全访问控制机制.该方案满足系统数据级敏感标记、访问控制与权责、威胁监控与追溯、敏感数据密文控制、剩余信息保护的云计算安全性需求.According to the operation features and safety requirements of government informatization affairs,combined with mandatory access control,role-based access control and channel access control, a secure hybrid access control model was designed in this thesis based on the information system of government affair in cloud center.A secure access control mechanism of cloud computing was also proposed,in which,access control baseline in advance,monitoring and arbitrating threaten in the process,and auditing and tracing back afterwards were established.This scheme can satisfy the security requirements of cloud computing for this system in sensitive mark on the data level,access control and responsibility,threat monitoring and tracing,cipher text control of sensitive data,and residual information protection.

关 键 词：访问控制 云计算 政务信息化 元数据 安全生命周期 

分 类 号：TP315[自动化与计算机技术—计算机软件与理论]