多域环境下安全互操作研究  

Research on secure interoperation in multi-domain environment

作　　者：叶春晓[1] 郭东恒[1] 

机构地区：[1]重庆大学计算机学院,重庆400044

出　　处：《计算机应用》2012年第12期3422-3425,3429,共5页journal of Computer Applications

基　　金：国家自然科学基金资助项目(71102065)

摘　　要：基于角色的访问控制(RBAC)实现域间互操作的访问控制策略主要是采取角色映射的方法。针对角色在域间映射过程中,没有考虑同一角色对不同域的作用程度和域与域之间互信级别不同的问题。提出角色映射阈值属性和域阈值属性的概念,一定程度上解决了同一角色对不同域的作用程度和域与域间信任级别不同的问题,为不同组织域间实现互操作实现更加细粒度的访问控制,进一步提高了域间互操作的安全性。The role-based access control policy is mainly to take the role mapping to achieve inter-domain interoperability.The role mapping does not consider the extent of the same role of impact on different domains,and different level of mutual trust between one domain and the other domain.Role mapping properties of the threshold and domain properties of the threshold were proposed,to solve the different problems of the same role on different domains and inter-domain trust level,and the different domains were organized in a more fine-grained access control,thus further improving the inter-domain interoperability security issues.

关 键 词：信息安全 访问控制 多域 角色的访问控制 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]