基于策略代数系统的策略间关系分析  

Policy Relations Analysis Based on Policy Algebra System

作　　者：陈晓苏[1] 吴金华[1] 倪俊[1] 

机构地区：[1]华中科技大学计算机科学与技术学院,湖北武汉430074

出　　处：《小型微型计算机系统》2010年第6期1067-1072,共6页Journal of Chinese Computer Systems

基　　金：国家"八六三"高技术研究发展计划项目(2007AA01Z309)资助

摘　　要：当前分析策略之间关系的研究多集中于访问控制策略,主要根据主体、目标和动作三元组上的重叠关系来划分策略冲突类型,存在划分标准不明确,冲突分类不完善等问题.采用策略代数系统来对策略进行描述,能表示Ponder中的授权策略(访问控制策略)和职责策略.分析了策略对应组成部分间所有可能存在的关系,包括离散、相等、包含、部分包含和交叉等五种,在这些关系的基础上指出了可能存在的冲突,并给出了相应的冲突消解方案.At present,many studies about the relationship between policies mainly focus on access control policies.They classify policy conflict by the overlapping relationship between subjects,targets and actions of two policies.But the classification standard is not clear,and the classification is not perfect and complete and so on.In this paper,algebra for policy description is presented.The policy algebra system can express the authorization policy（Access control policy）and the obligation policy in Ponder.The relationships between corresponding component of policies that may exist,including completely disjoint,exactly matching,inclusively matching,partially matching and correlated,are detailed discussed.Based on the classification,the possible conflicts are pointed out and the corresponding resolutions are provided.

关 键 词：基于策略的管理 策略代数系统 策略冲突 冲突检测 冲突消解 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]