基于组织机构访问控制模型在应用区域边界的应用  

Application of Organization Structure Based Access Control model to application enclave boundary

作　　者：陈翀[1] 盛可军[2] 韩臻[1] 

机构地区：[1]北京交通大学信息安全体系结构研究中心,北京100044 [2]海军工程大学,武汉430033

出　　处：《铁路计算机应用》2006年第1期40-42,共3页Railway Computer Application

基　　金：国家937重点基础研究发展规划项目(C1999035801)

摘　　要：介绍应用区域边界访问控制的特点和基于组织机构的访问控制模型在应用区域边界的应用。基于组织机构的访问控制模型是一种面向企事业单位实际结构提出的访问控制模型,根据企事业单位的逻辑结构,将系统划分为多个是有相互隶属关系的安全域,通过定义各安全域之内的安全策略及安全域之间的信任关系,保证系统内部信息流动的安全性和访问控制的易行性。It was introduced the characters of access control in application enclave boundary and the Organization Structure Based Access Control model （OSBAC） implemented in application enclave boundary. OSBAC was an access control model prompted according to the organization of enterprises. The whole system was divided into many security areas with inherit relationships according to the logical structure of enterprises. The security of the information flow and the simple and convenience of access control were guaranteed by defining the security policy in each security areas and established the confident relationships between security areas.

关 键 词：访问控制 应用区域 边界安全 组织机构 

分 类 号：TP39[自动化与计算机技术—计算机应用技术]