CSCW系统访问控制模型及其基于可信计算技术的实现  

Access Control Model for CSCW System and Implementation Based on Trusted Computing Technology

作　　者：张志勇[1] 杨林[2] 马建峰[1] 普杰信[3] 

机构地区：[1]西安电子科技大学教育部计算机网络与信息安全重点实验室,西安710071 [2]中国人民解放军总参谋部第61研究所信息安全研究室,北京100039 [3]河南科技大学电子信息工程学院,洛阳471003

出　　处：《计算机科学》2007年第9期117-121,124,共6页Computer Science

基　　金：国家自然科学基金项目(No.60573036);教育部科学技术重点研究项目(No.03081)

摘　　要：现有的CSCW访问控制策略模型缺少时间和约束特性,在实现上也未能较好地解决开放网络下的身份伪装和欺骗问题,以及影响安全策略完整性实施的软硬件平台可信问题。本文基于角色一活动概念提出了一种具有时间依赖和约束特征的CSCW访问控制模型Fine-grained Access Control for CSCW,从而能够定义更为精确细致的安全策略;在模型实现中给出了Trusted Computing-enabled Access Control架构以及关键的策略分发和实施协议等。该方法通过建立完整的协作实体-CSCW平台-应用信任链,构建了可信的访问控制平台,增强了协作实体的身份鉴别,并通过角色相关策略的分发和在本地协作站点上的完整性实施,减轻了服务器端集中式执行安全策略的负担。Access control policies and models available lack of temporal characteristic, and do not well solve the question of identity disguise and cheat in open network, as well as platform trustworthy question effecting on security policies integrity enforcement. This paper presented an role-activity-based access control with time-dependent and constraints features for CSCW, called as Fine-grained Access Control for CSCW, which could define more precise security policies; Trusted Computing-enabled Access Control architecture and key policies dissemination and enforcement protocols are addressed. The method constructs CSCW trustworthy access control platform and strengthens cooperative entity identification, through creating integrated cooperative entity-CSCW platform-application trustworthy chain, as well as easing centralized policy server using partial related policies distribution and integrity enforcement in local workstation.

关 键 词：CSCW 访问控制 可信计算 TPM 策略分发 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]