一种基于Clark-Wilson模型的职责分离算法及应用  

A Method to Separate the Duties and its Application Based on Clark-Wilson Model

作　　者：李勇军[1] 蔡皖东[1] 

机构地区：[1]西北工业大学计算机学院,陕西西安710072

出　　处：《微电子学与计算机》2005年第6期129-131,共3页Microelectronics & Computer

摘　　要：目前许多行业采用数据集中处理和存储,使管理员的权限过于集中,这就带来了新的安全风险,许多单位为了防范这种风险仅仅从制度上进行了限定,而没有技术上的保障,致使制度行同虚设。本文提出和实现了一种基于Clark-Wilson模型的职责分离算法,该算法主要用于分散过于集中的权限。通过实际的应用表明,该算法达到了分散权限的目的,防范了上述风险,保证了数据的完整性。At present, many industries are adopting the method of processing and storing the data by putting them together. This concentrates the managing staff's right, which bring about new risk. To control this risk, many offices only limit them by means of rules, which cannot be guaranteed by the using techniques, therefore the rules exist in namely only. In this paper, a method to separate the duties based on Clark-Wilson model is put forward and realized. The practical uses prove that this method can really separate the right, reduce the risks mentioned above, and keep the completeness of the data.

关 键 词：数据完整性 CLARK-WILSON模型 职责分离算法 分散权限 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]