基于角色的安全互操作模型  

Role-based secure interoperability model

作　　者：张成彬[1] 廖振松[2] 

机构地区：[1]盐城工学院信息工程学院,江苏盐城224051 [2]华中科技大学计算机科学与技术学院,湖北武汉430074

出　　处：《计算机工程与设计》2010年第3期483-485,共3页Computer Engineering and Design

摘　　要：针对当前域间安全互操作中存在的不足,如不同粒度控制域之间的用户进行安全互操作时,带来的身份识别和规则冲突等一系列的问题,提出一种基于角色的安全互操作模型:RBSIM。在该模型中,引入角色,实现用户权限的分离,方便管理,角色--权限进行二次指派,方便系统对用户行为的细粒度控制。同时,该模型可解决安全域之间规则约束、粒度冲突等问题。用户通过发送请求申请访问资源,通过证书认证分配角色授予权限。角色的引入在带来管理方便的同时,充分解决了粗细粒度控制的冲突问题。Based on the existing problems,for an instance,when domains have different security granularity,it may bring trouble to secure interoperability,such as undefined user type,policy conflicts,and so forth,a role based secure interoperability model（RBSIM） is proposed.In the model,the concept of role is introduced to realize the separation between user and privileges.At the same time,the reassignment between role and privileges is convenient to manage user’s action with fine-grain.Meanwhile,the model can deal with rule-restriction and granularity conflicts among multi secure domains.Users get the resource by sending access request and authenticate each other by credentials.Role introduction not only helps domain management,but also handles conflicts deriving from different security granularity.

关 键 词：认证 角色 安全互操作 授权 访问控制 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]