基于策略的CUC研究  

The Study of Policy-based CUC

作　　者：罗霄峰[1] 罗万伯[2] 

机构地区：[1]四川大学锦江学院,四川成都610065 [2]四川大学计算机学院,四川成都610065

出　　处：《通信技术》2016年第6期751-757,共7页Communications Technology

摘　　要：针对传统访问控制安全策略管理的不灵活和扩展性差等问题,提出基于策略的访问控制方法,将安全策略有机地注入CUC模型中。介绍了PBCUC的组件和体系结构,并用代数方法对其进行了形式化描述,同时研究了PBCUC的实现问题,提出用XACML表示PBCUC的安全策略,使用多域环境安全策略管理框架来管理这些策略,用i X-MIDD方法处理访问请求。仿真实验表明,这种方法的访问请求决策时间很快,可在μs级时间完成。In deal with not flexible and poor scalability issues of the CUC security policy management, a policy-based access control method is proposed to build into the CUC model. The new model system is an 8-tuple, the subject set, the object set, the context set, the right set, the set of authorizations, the obligation set, and the policy set. An algebra approach was employed to describe PBCUC syntax and semantics formally. Its implementation was studied, including using XACML to express PBCUC policies, to manage the policies by security policy management framework in multi-domain environment, to evaluate access requests by iX- MIDD approach. Simulation shown that access request decision time which could be completed at μ s level was quick enough for application.

关 键 词：访问控制 UCON(使用控制) PBAC(基于策略的访问控制) 安全策略 XACML 

分 类 号：TP309[自动化与计算机技术—计算机系统结构] TP391[自动化与计算机技术—计算机科学与技术]