一种基于信任的动态访问控制策略  

A trust-based dynamic access control scheme

作　　者：林庆国[1] 刘宴兵[1] 

机构地区：[1]重庆邮电大学移动互联网技术研究所,重庆400065

出　　处：《重庆邮电大学学报（自然科学版）》2010年第4期478-482,共5页Journal of Chongqing University of Posts and Telecommunications(Natural Science Edition)

基　　金：国家自然科学基金(60973160);重庆市科委项目(CSTC;2009BA2024 & 2009AB2053)资助~~

摘　　要：基于角色的访问控制模型(role-based access control,RBAC)被普遍认为是当前最具有潜力的访问控制策略,已成为信息安全等领域研究的热点之一,然而传统的RBAC模型不能完全适合网格环境下的访问控制。针对网格环境下传统的RBAC中资源共享的伸缩性和恶意行为问题,在传统RBAC模型的基础上引入信任管理技术,提出一种新的动态的访问控制方式。这种新型的访问控制方式根据用户所属的信任等级动态调整用户的角色,在信任计算中,采用一种基于忠诚度的信任计算方法。仿真结果显示,该访问控制方式能有效地遏制恶意行为,并且可以解决伸缩性问题。RBAC（role-based access control） has been generally accepted as one of the most promising access control policies,and it has become a hot research topic in information security area.However,traditional RBAC model is not completely fit for the access control in grid environment.In this paper,trust management technology was introduced on the basis of traditional access control model and a new dynamic access control scheme to improve scalability and to restrain malicious behavior was proposed.This new scheme could adjust a user＇s role by his trust level.For trust calculation,a loyaltybased trust calculation method was proposed.Simulations show that this scheme can easily restrict malicious behavior of entities,and improve the scalability.

关 键 词：网格计算 访问控制 信任 基于角色的访问控制模型 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]