基于可信等级的BLP改进模型  

Improved BLP Model Based on Trusted Level

作　　者：池亚平[1] 樊洁[1,2] 程代伟[1] 

机构地区：[1]北京电子科技学院通信工程系,北京100070 [2]西安电子科技大学通信学院,西安710071

出　　处：《计算机工程》2012年第8期117-119,127,共4页Computer Engineering

基　　金：国家自然科学基金资助项目(60951001);国家科技支撑计划基金资助项目(2009BAH52B06);北京市自然科学基金资助项目(4102057);发改委信息安全产品产业化专项基金资助项目([2009]1886)

摘　　要：BLP模型存在完整性保护缺失、可信主体定义不明确和未考虑平台环境因素等问题。为此,提出一种基于可信等级的BLP改进模型TL-BLP。该模型引入主客体和平台的可信等级,并对BLP模型安全特性、主客体的敏感标记和状态转移规则进行改进,从而实现可信度的动态度量,保证访问操作平台的安全性,通过对BLP模型"下读上写"的限制,保证信息的完整性。分析结果表明,TL-BLP在保证信息机密性的基础上,能提高系统的完整性和可用性,实现基于可信度的访问控制。There are some problems in Bell-La Padula（BLP） model, including the loss of integrity protection, the indetermination of trusted subject and the neglect of the environment lhctors of the platform, so this paper proposes an improved BLP model based on trusted level, which is named TL-BLP. In TL-BLP, security property, sensitive label of subject and object, and state transfer rules are improved by introducing the trusted level of subject, object and plattbrm. It realizes the dynamic measurement of trusted degree and ensures access platform security, and protects the information integrity by the restriction to ＂read down and write up＂. Analysis shows that the model not only can ensure the confidentiality, but also can enhance the integrity and availability of the system effectively, and it implements the access control based on trusted degree.

关 键 词：BLP模型 多级安全 可信平台 可信等级 访问控制 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]