云计算下基于用户行为信任的访问控制模型  

Access control model based on trust of users' behavior in cloud computing

作　　者：张凯 潘晓中[1] 

机构地区：[1]武警工程大学电子技术系,西安710086

出　　处：《计算机应用》2014年第4期1051-1054,共4页journal of Computer Applications

摘　　要：针对当前云计算访问控制中角色不能随着时间动态改变的问题,提出了一种基于用户行为信任的云计算访问控制模型。该模型根据综合用户的直接和间接信任值得到的信任值确定其信任等级,激活其所对应的角色以及赋予该角色一定的访问权限,提供请求的资源,从而达到访问控制的目的;并给出了基本组成元素和实现过程。实验结果表明,所提出的访问控制模型能够提高用户行为信任值评估的客观性,能够抵抗各类非法用户访问云计算,增强了云计算中资源的安全性和可靠性。Considering the problem that the role of the user cannot be changed dynamically over time in access control model of cloud computing,a new access control model was proposed based on trust of users＇ behaviors for cloud computing.The trust level was determined according to the trust value synthesized from direct trust and recommendation trust,the roles were activated and granted permission to access resources,then services provided the requested resources,so as to achieve the purposes of access control.Besides,the basic elements and implementation process were proposed.The experimental results demonstrate that the proposed model can improve the objectivity of the trust evaluation of users＇ behaviors,and it can resist all illegal users access to cloud computing and enhance reliability and security of the data in cloud computing.

关 键 词：信息安全 云计算 访问控制 基于角色的访问控制 用户行为 信任 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]