基于量化权限的门限访问控制方案  

Threshold Access Control Scheme Based on Quantifying Permission

作　　者：雷浩[1] 冯登国[1] 周永彬[1] 黄建[2] 

机构地区：[1]中国科学院软件研究所信息安全国家重点实验室 [2]牛津大学计算实验室

出　　处：《软件学报》2004年第11期1680-1688,共9页Journal of Software

基　　金：国家自然科学基金;国家高技术研究发展计划(863);国家杰出青年科学基金~~

摘　　要：研究了在引入量化权限观点后从访问控制角度实现秘密保护的问题.元权限是从哲学上质和量的角度认识传统意义上的权限所探究出的新概念,较以往访问控制中认识和使用权限而言,它全面而深入地反映了权限这一概念的本质.进一步结合门限思想和基于角色的访问控制机制所提出的基于量化权限的门限访问控制方案,从访问控制的角度研究了秘密保护问题.在秘密保护方面,基于量化权限的门限访问控制方案具有一些独特的优点,比如分发给参与者的秘密分片和要保护的秘密无知识上的联系、可以反映出参与者信任度的差异以及运算量低.Secret protection is studied after introducing the quantifying permission idea in the view of access control. Meta-Permission is derived from the view of quality and quantity in philosophy. Compared with traditional cognition and permission used in access control, it comprehensively and deeply reflects the essence of permission. Combining with the threshold idea and RBAC, a threshold access control scheme based on quantifying permission is proposed. This scheme is applicable as widely as secret-sharing scheme, and shares the same function in protecting secret. Furthermore, it has some distinct advantages such as no relation in knowledge between the secret pieces hold by participants and the protective secret target, the ability for expressing the difference among participants' trustworthiness, and the low complexity in computing.

关 键 词：量化权限 门限方案 元权限 角色 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]