云计算中基于否定规则的访问控制技术的研究  

RESEARCH ON DENY RULE-BASED ACCESS CONTROL TECHNOLOGY IN CLOUD COMPUTING

作　　者：吴正学[1] 戴牡红[1] 

机构地区：[1]湖南大学信息科学与工程学院,湖南长沙410082

出　　处：《计算机应用与软件》2014年第1期30-33,72,共5页Computer Applications and Software

基　　金：湖南省自然科学基金项目(2011FJ3034)

摘　　要：数据的安全性和隐私保护给云计算领域带来了极大挑战,为实现合作企业间在云环境下公开共享部分数据且不涉及保密信息,提出一种基于否定规则的访问控制技术。主要思想是通过判断访问查询是否授权,检测授权与否定规则是否存在冲突,来达到阻止非法访问的目的。理论分析和实验结果表明该机制能有效地保障云数据的安全。The security of data and the privacy protection bring huge challenges to cloud computing field. In order to implement part sha- ring of the data publicly among the cooperative enterprises in cloud environment without involving into confidential information, in this paper we provide an access control method which is based on negative rules. The main idea of the method is to detect whether the authorisation con- flicts with the negative rules through judging the authorisation of access and query so that to reach the goal of preventing the illegal accesses. Both the theoretical analysis and experimental results show that this mechanism can ensure the security of cloud data effectively.

关 键 词：云计算 数据安全 访问控制 授权规则 否定规则 

分 类 号：TP392[自动化与计算机技术—计算机应用技术]