基于用户信任的动态多级访问控制模型  

Dynamic Multi-level Access Control Model Based on User Trust

作　　者：朱一群[1] 

机构地区：[1]上海电机学院电子信息学院,上海200240

出　　处：《计算机工程》2011年第23期129-131,共3页Computer Engineering

基　　金：上海高校选拔培养优秀青年教师科研专项基金资助项目(sdj09015);上海电机学院科研启动基金资助项目(10C413);上海电机学院重点学科建设基金资助重点项目(10XKF01)

摘　　要：在角色访问控制的基础上,增加用户动态信任级别和静态信任级别,建立一种基于用户信任的动态多级访问控制模型。该模型通过用户的静态信任值和角色,获得静态权限,判断用户获得权限的资格,通过用户的动态信任值,判断用户的行为可信性,决定用户在实际访问操作中的具体权限。给出应用实例及模型安全性分析,结果表明该模型能实现动态授权,且满足最小特权原则。On the basis of Role-based Access Control（RBAC）,this paper adds user＇s static trust level and dynamic trust level,presents a kind of user trust based dynamic multi-level access control model.The model can get static permission according to user static trust value and role,and can judge the user behavior trust and decide the concrete application permissions according to user dynamic trust value in the process of user accessing resource.It gives the application example and the safety analysis,results show that the model can grant authorization dynamically and meets minor privilege principle.

关 键 词：静态信任 动态信任 角色访问控制 信任等级 动态授权 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]