基于RBAC的多域策略冲突及其检测方法  

Multi-domain Policy Conflicts and Detection Methods Based on RBAC

作　　者：谷和武[1] 潘理[1] 

机构地区：[1]上海交通大学电子信息与电气工程学院

出　　处：《信息安全与通信保密》2010年第6期84-86,共3页Information Security and Communications Privacy

基　　金：国家自然科学基金资助项目(批准号:60903191);国家高技术研究发展计划(863)资助项目(编号:2007AA01Z457)

摘　　要：针对多安全域之间的访问控制问题提出了策略冲突分类及其检测方法。研究了基于RBAC的多域安全互操作模型及其安全特性,分析了由于引入角色映射带来的策略冲突并对这些冲突进行分类。根据多域环境的特点将安全域角色系统抽象成有向图,利用有效角色系统和角色层次关系,提出了基于角色系统有向图的策略冲突检测方法。最后对方法的计算复杂度进行了分析并给出策略冲突的解决方法。For the access control in multi-domain, this paper proposes a method for policy conflicts classification and detection. The secure interoperation model based on RBAC and its security characteristics are studied, the policy conflicts resulted from the introduction of role mapping are analyzed and classified. The role system is abstracted as directed graph, and the effective roles and role hierarchy are utilized to propose a method based on directed graph of role system for detecting policy conflicts. Finally, the computational complexity？of the proposed method is analyzed, and the solutions for policy conflicts are given.

关 键 词：安全互操作 策略冲突 有向图 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]