基于反馈的访问控制模型研究  

Study of Access Control Model Based on Feedback Mechanism and Reliable Factor

作　　者：乐振浒[1] 蒋兴浩[1] 孙锬锋[1] 

机构地区：[1]上海交通大学信息安全工程学院,上海200240

出　　处：《信息安全与通信保密》2011年第1期69-71,共3页Information Security and Communications Privacy

摘　　要：现有访问控制模型中,用户一旦通过身份验证后其权限就固定了,而当用户变成不再可靠并在其权限范围内进行危害系统的操作时,现有访问控制模型不能动态调整其权限来避免危害。在权限管理基础设施(PMI)访问控制模型基础上定义了可靠因子及其计算方法来度量用户的可靠程度,并引入反馈机制,即用户登录时安全状况及行为操作都将对其权限产生反馈,有效地消除了现有模型所存在的隐患,为访问控制提供了新思路。The existing PMI access control models have the static problem that the right of the user is fixed after the user is authenticated. However, when the reliable user becomes unreliable and does harm to the system, his right could not be adjusted dynamically. So the feedback mechanism based on the PMI access control model is introduced and the concept of reliable factor is raised. This could overcome the static problem of the former access control model, and thus some new thought is provided for the access control.

关 键 词：反馈机制 可靠因子 权限管理基础设施 访问控制 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]