带空间特性角色访问控制模型的冲突会话  

Conflictive session of spatial role-based access control model

作　　者：邹志文[1] 鞠时光[1] 陈昌乾[1] 

机构地区：[1]江苏大学计算机学院,江苏镇江212013

出　　处：《计算机应用研究》2009年第10期3903-3905,共3页Application Research of Computers

基　　金：国家自然科学基金资助项目(60773049);江苏省研究生科研创新计划项目(CX07B_125z);镇江市社会发展基金资助项目(SH2008028;SH2006058)

摘　　要：为提高角色访问控制模型的安全描述能力,主要研究带空间特性的角色访问控制模型(SRBAC)的会话特性。首先对传统会话作了扩展,规定每个会话都有一个优先级;再讨论了SRBAC模型可能引起冲突的会话,给出了冲突会话的分类方法;同时提出消除冲突会话的策略,可以确定任一空间位置的一个无阻塞会话集合;最后提出一个系统会话调度算法,解决了随着用户空间位置的变化引起的会话状态转变问题,从而提高了SRBAC模型的实用性和安全性。To strengthen the capability of safety discription for role-based access control under spatial environment, this paper studied the session with spatial character. After extending the traditional session, one put PRI to every session , then the spatial role-based access control（SRBAC） probably lead to the conflictive session , and gave its classification methods, as well as put forward the strategy of eliminating the conflictive session, thus also confirmed a non-blocked sessions set at any spatial location. Finally, presented a algorithm which solved the state change problem of the sessions by the change of spatial laeation. Thereby,guaranteed the SRBAC＇ s utility and security.

关 键 词：信息安全 访问控制 空间特性 冲突会话 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]