基于平台可信等级的RBAC模型研究与改进  

Research and improvement on role-based access control model based on trust level of platform

作　　者：池亚平[1] 杨磊[1,2] 李兆斌[1] 

机构地区：[1]北京电子科技学院通信工程系,北京100070 [2]西安电子科技大学通信学院,陕西西安710071

出　　处：《计算机工程与设计》2011年第12期3989-3992,3996,共5页Computer Engineering and Design

基　　金：国家自然科学基金项目(60951001);国家科技支撑计划重点基金项目(2009BAH52B06);北京市自然科学基金项目(4102057)

摘　　要：针对RBAC模型仅仅依靠用户身份进行角色和权限分配,未考虑用户平台的安全及可信性的问题,提出一种基于平台可信等级的改进RBAC模型(TLPRBAC)。TLPRBAC模型引入可信平台和可信等级两个实体元素,改进了实体关系和授权规则。改进的RBAC模型采用将角色与可信等级、可信等级与访问客体相关联的方法,实现不同可信等级主体对不同安全级别客体的细粒度访问控制。最后提出一个TLPRBAC模型在政府内网中的文件访问控制应用方案。Aimed at the problem that distribution permissions of roles is only depended on user＇s identity in traditional RBAC model,without considering the security and credibility of the platform,an improved role-based access control model based on trust level of platform（TLPRBAC） is proposed.Two entities that the trust platform and trust level are introduced in the TLPRBAC model,and the relationships of entities and authorization rules are developed.The roles are associated with the platform security and the trust level is associated with the entities in the improved RBAC model,to achieve a more fine-grained access control between a trusted level subject entity and a safety level object entity.Finally,the TLPRBAC model is applied to a documents access control scheme in government intranet.

关 键 词：访问控制 基于角色访问控制 可信平台 可信等级 电子政务 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]