开放系统中基于信任度和上下文的访问控制模型  

A Trustworthiness-and Context-Based Access Control Model for Open Systems

作　　者：冷春霞[1] 虞慧群[1] 韩建民[1] 

机构地区：[1]华东理工大学计算机科学与工程系,上海200237

出　　处：《华东理工大学学报（自然科学版）》2009年第1期101-106,共6页Journal of East China University of Science and Technology

基　　金：国家自然科学基金(60473055;60773094);上海市曙光计划项目(07SG32)

摘　　要：开放系统中,访问控制机制不仅要能处理数量庞大且身份无法预先确定的用户的访问请求,而且能充分反映用户访问请求时上下文环境信息。本文提出了一种基于信任度和上下文的访问控制模型TC-RBAC,并给出了用户信任度计算方法。通过信任度为未知身份用户分配合适角色,上下文约束实现了对不同的访问请求上下文信息做出不同授权决策,从而满足开放环境下访问控制的设计要求。The access control mechanism in open systems can not only respond to the access requirement of a large amount of users whose identities are not recognizable in advance, but also reflect context information in user＇s access requirements. We propose a trustworthiness- and context-based access control model （TC-RBAC） and give a method of evaluating the trustworthiness of users. By means of trustworthiness, the applicable roles are assigned to the users whose identities are not recognizable in advance. Besides, context constraint contributes to the decisions of authorization according to context information in user＇s access requirements. These satisfy the design demands of the access control mechanism in open systems.

关 键 词：信任度 上下文 角色 访问控制 开放系统 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]