一种基于多域安全信任的访问控制模型  

A Multi Domain Security Trust Based Access Control Model

作　　者：张成彬[1] 廖振松[2] 

机构地区：[1]盐城工学院信息工程学院,江苏盐城224051 [2]华中科技大学计算机科学与技术学院,湖北武汉430074

出　　处：《计算机安全》2009年第2期53-56,共4页Network & Computer Security

摘　　要：访问控制是一种可同时服务于用户与资源的安全机制。安全域通过使用访问控制机制为用户访问资源提供方便,同时亦对用户行为进行监视与控制。然而,由于P2P网络缺乏集中控制,现有的访问控制技术无法对P2P网络的网络节点进行控制,特别是网络中节点行为缺乏指导和约束。基于当前P2P网络访问控制中存在的不足,提出一种基于多域安全信任的访问控制模型:MDTBAC。MDTBAC模型通过扩展多级安全机制来实现访问控制,将信任算法计算所得的节点信任度作为访问级别划分标准,根据各个节点的信任度来分配相应的访问控制级别,不同的访问控制级别拥有不同的权限。Access control is a security mechanism which can serve for both users and resource providers. It can bring convenience for users to access resource and for domain to monitor and control users. However, since P2P network has no centralized control center, existing access control mechanisms cannot have a good control towards the nodes in the network. Based on the problems, a multi domain security trust based access control model （MDTBAC） is proposed in the paper, which can realize access control by using multi security mechanisms. MDTBAC treats the trusted degree as a standard to distinguish all kinds of nodes, and distributes access control rights according to a node＇ s trusted degree. It helps to authorize different rights to various nodes.

关 键 词：安全域 访问控制 信任 安全等级 

分 类 号：TP309[自动化与计算机技术—计算机系统结构] TP393.092[自动化与计算机技术—计算机科学与技术]