基于动态分集的中国墙模型研究  

Chinese Wall Model Based on Dynamic Divided-set

作　　者：姜路[1] 鹤荣育[1] 魏彦芬[1] 

机构地区：[1]解放军信息工程大学密码工程学院,郑州450000

出　　处：《计算机科学》2015年第1期159-163,共5页Computer Science

摘　　要：BN(Brewer-Nash)中国墙模型对写操作有着严格的限制,它只从客体方面考虑了冲突关系,且需要事先静态划分访问区域,不适宜动态变化的系统。定义"分集"的概念,并在此基础上提出基于分集的中国墙模型,该模型能够从主体和客体两方面出发研究系统中的冲突关系,并动态地扩充访问区域。证明了该模型是冲突安全的,并通过一个实例说明了该模型的应用。The Chinese wall model gives much constraint on write permission,while its access regions need to predetermined and divided statically.Its conflict of interest relation was defined by the object＇s interest.A modified vision of Chinese wall was proposed to solve this problems.The divided-sets was defined and both the interest of subject and object were considered to analyze the system＇s conflict of interest relation.In this model,objects and subjects can be divided into different access regions which can be extended dynamically.At last,the security of this model was proved.The application of the model was showed by a simple example.

关 键 词：访问控制 中国墙模型 冲突关系 动态分集 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]