云计算环境中基于对象和用户的角色访问控制模型  

Role-based Access Control of User and Object in Clouding Computing Environment

作　　者：韩晓光[1] 姚宣霞[1] 曲武[2,3] 锁延锋[1] 

机构地区：[1]北京科技大学计算机与通信工程学院,北京100083 [2]北京启明星辰信息安全技术有限公司核心研究院,北京100193 [3]清华大学计算机科学与技术,北京100084

出　　处：《科学技术与工程》2014年第29期229-233,共5页Science Technology and Engineering

基　　金：国家自然科学基金(61163025);自然科学基金面上项目(61271275)资助

摘　　要：针对云计算环境中资源按需访问的特点以及不同资源不同用户访问控制的特殊性,基于基本角色访问控制模型(role-based access control,RBAC),提出一种基于对象和用户的角色访问控制模型OURBAC(object-and-user based on RBAC);并设计了具体的用户访问权限判定规则。以实际实现应用为背景,设计了OURBAC的具体实现流程,对算法的安全性进行了分析,表明本算法使云资源访问控制得以进一步细化,能明显减少系统中角色数量,有效的提高了系统运行效率及安全性。In the cloud computing environment,access control is on-demand and it requires users under control when accessing different resources.Based on the theory of role-based access control （RBAC）,OURBAC is presented according to the characteristic.It is a new access control model based on role access of users and objects.Access permission rules of authority judgment for specific user are also designed.The algorithm used in OURBAC model made the cloud resource access control be further refined,and significantly reduced the number of roles in the system to improving the operation system efficiency and safety effectively.Based on the actual implementation of application,the implementation process of OURBAC model is designed and the security of the algorithm is analyzed.

关 键 词：云计算 访问控制 基于对象和用户 权限规则 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]