基于无干扰理论的分布式多级安全核心架构  

Distributed multilevel security core architecture based on noninterference theory

作　　者：邵婧[1,2] 陈性元[1] 杜学绘[2] 曹利峰[2] 

机构地区：[1]信息工程大学三院,郑州450004 [2]信息工程大学四院,郑州450004

出　　处：《计算机应用》2013年第3期712-716,共5页journal of Computer Applications

基　　金：国家973计划项目(2011CB311801);国家863计划项目(2012AA012704);河南省科技创新人才计划项目(114200510001)

摘　　要：为了提高分布式环境下多级安全实施的正确性和可行性,提出了一个分布式多级安全保护核心架构——分布式可信计算基(DTCB)。DTCB具有三层结构,包括系统层可信计算基、模块层可信计算基和分区层可信计算基,实现了从模块间、分区间到分区内部的逐步细化的信息流和访问控制,有效降低了分布式环境下多级安全实施的复杂性。最后,采用组合无干扰模型形式化证明了DTCB的安全性,结果表明,DTCB能够从整体上为分布式系统提供较好的多级安全保护。To improve the correctness and feasibility of the implementation of multilevel security in the distributed environment, a distributed multilevel security core architecture -- Distributed Trusted Computing Base （DTCB） was proposed. DTCB was divided into three layers, TCB of System layer, TCB of Module layer and TCB of Partition layer, finer multilevel control granularity was realized step by step, greatly reducing the complexity of the implementation of multilevel security in the distributed environment. At last, based on the eomposable noninterference model, the security of DTCB was formally proved. The result shows that DTCB assures the multilevel security of distributed system as a whole.

关 键 词：多级安全 无干扰 可信计算基 分布式系统 架构 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]