以社区域为中心基于信任的访问控制  

Community field-centric trust-based access control model

作　　者：姚志强[1,2] 熊金波[1,2] 马建峰[1] 李琦[1] 刘西蒙[3] 

机构地区：[1]西安电子科技大学计算机学院,陕西西安710071 [2]福建师范大学软件学院,福建福州350108 [3]西安电子科技大学通信工程学院,陕西西安710071

出　　处：《通信学报》2013年第9期1-9,共9页Journal on Communications

基　　金：长江学者和创新团队发展计划基金资助项目(IRT1078);国家自然基金委员会-广东联合重点基金资助项目(U1135002);国家自然科学基金资助项目(61370078);国家科技部重大专项基金资助项目(2011ZX03005-002);中央高校基本科研基金资助项目(JY10000903001);福建省自然科学基金资助项目(2011J01339)~~

摘　　要：智能服务agent基于上下文感知的交互与协作为数字社区提供动态服务的同时,也带来了安全访问问题。在综合分析数字社区中agent的信任、社区域内外协作等特征的基础上,提出以社区域为中心基于信任的访问控制模型,即依据agent自身上下文及信任证书建立社区域,其后信任等级随会话动态调整,通过信任等级与信任阈值的匹配关系有效地控制权限的激活和使用。与最新研究成果相比,该模型突出的特点是实现动态权限控制,同时满足社区域内及社区域间角色的安全交互与协作。Context-aware interaction and cooperation among agents provids digital community services. However, it also brings new problems of secure access. A novel community field-centric trust-based access control model （referred to as the CTBAC） was developed by thoroughly considering both the trust level of agent and the cooperation among agents in- side and outside of community fields in digital community. There are two novel ingredients. Firstly, a community field was established in terms of agent＇s own contexts and trust certificate. Thus, the trust level could be dynamically adjusted based on the sessions. Secondly, the activation and use of access control permissions according to the match relationship between the trust level of agents and trust threshold. The proposed CTBAC model was compared to several access con- trol models and its effectiveness in both dynamic permission control and security protection was demonstrated.

关 键 词：数字社区 智能体 信任 协作 访问控制 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]