一种时间约束的强制访问控制模型  

A MANDATORY ACCESS CONTROL MODEL WITH TIME CONSTRAINTS

作　　者：黄凯[1] 欧庆于[1] 吴晓平[1] 

机构地区：[1]海军工程大学信息安全系,湖北武汉430033

出　　处：《计算机应用与软件》2010年第11期279-281,共3页Computer Applications and Software

摘　　要：计算机系统中,安全机制的主要内容是访问控制。针对传统的强制访问控制(MAC)模型没有考虑到时间因素对访问控制的影响,分析了对客体访问许可的时间特性,在传统MAC模型基础上加入时间事件处理器,引入对主、客体的时间限制,定义了加入时间约束后的访问控制规则,提出了带时间特性的强制访问控制模型。模型具有良好的适应能力和描述能力,有效地解决了时间敏感活动的访问控制问题,提高了系统的安全性。Access control is the main part of the security mechanism in computer systems.Traditional mandatory access control（MAC） model does not take the influence of time character on access control into account,to address that issue,time character of permissions on object access is analyzed in this paper.By adding a time events processor to traditional MAC model,time constraints associated with subjects and objects are introduced,the rules of access control with time constraints acceded are defined,and a new mandatory access control model with time character is presented.The proposed model has good capabilities of adaptability and description,effectively settles the access control problem in time-sensitive activities,the system＇ s security has been improved as well.

关 键 词：安全机制 强制访问控制 时间约束 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]