带有时间约束支持冲突检测的访问控制模型  

An Access Control Model of Supporting Conflict Detection with Time Constrains

作　　者：张玉静[1] 刘军[1] 李先珠[1] 

机构地区：[1]解放军理工大学指挥信息系统学院,江苏南京210007

出　　处：《计算机技术与发展》2015年第2期117-121,共5页Computer Technology and Development

基　　金：江苏省自然科学基金(BK2008090)

摘　　要：为确保存储在系统中的访问策略都是无冲突的,提高策略冲突检测的效率,使系统能够正确有效的运行,将本体的概念应用到访问控制中,提出了一种基于本体的支持策略冲突检测的访问控制模型,并对该模型中的核心模块—策略冲突检测模块进行了详细说明。在此基础上,为使系统中的授权具有时效性,更加符合实际应用,将时间特征引入模型,根据时间约束的特征,将资源分为4类,细化了资源的类别,增强了系统授权的能力。最后,针对这4类资源的访问控制,给出了模型的时间约束算法。In order to ensure the policies stored in the system are conflict-free, to improve the efficiency of strategy conflict detection and make the system operated correctly and effectively, apply the concept of ontology into the access control and propose an ontology-based access control model of supporting policy conflict detection, and has described policy detection engine in detail which is the core of the model. On this basis, the model has introduced the time constrains to make the system of authorization has timeliness. Then the resources can be divided into 4 categories according to the characters of the time constrains for corresponding to the reality, enhancing the capability of system authorization. Finally, propose a time constrains algorithm for this model according to the access control of four resource.

关 键 词：访问控制 时间约束 本体 策略冲突检测 

分 类 号：TP31[自动化与计算机技术—计算机软件与理论]