基于角色的跨域使用控制模型及其应用研究  

Role-based and cross-domain usage control model and its application

作　　者：刘智敏[1] 顾韵华[1] 

机构地区：[1]南京信息工程大学计算机与软件学院,南京210044

出　　处：《信息技术》2012年第4期152-155,158,共5页Information Technology

摘　　要：针对网络环境下多自治域之间互操作安全需求,提出了一个基于角色和映射规则的跨域使用控制模型CD_UCON(Cross-Domain UCON)。该模型结合了基于角色的访问控制(RBAC)模型的权限机制和使用控制模型(UCON)的框架。为实现属性易变性和访问控制连续性,CD_UCON对UCON模型中的属性和授权规则进行扩展;通过映射规则实现跨域交互。以CD_UCON模型在物资采购管理系统中的应用分析说明了该模型的可行性。To meet the demand of the safety of interoperability between autonomy domains in network environment,a role-and-mapping-rule-based cross-domain usage control model（CD_UCON） is proposed.Permission mechanism of the role-based access control model and the frame of usage control model are integrated in the CD_UCON model.Some solutions for the necessary elements which are attributes and the authorization rules of the usage control model is putting forward in the CD_UCON model,in order to reach the mutability of attributes and the continuity of access control,and transform between domains by mapping rules.The specific application of CD_UCON model in materials purchasing management system is described as an example,the verification mechanism and safety of the model is analyzed.

关 键 词：跨域使用控制 基于角色的访问控制 属性 映射规则 物资采购管理 

分 类 号：TP273[自动化与计算机技术—检测技术与自动化装置]