一种面向云计算的信任-角色访问控制模型  

A Trust-role Access Control Model Facing Cloud Computing

作　　者：黄兰英[1] 熊曾刚[1] 叶从欢[1] Huang Lanying Xiong Zenggang Ye Conghuan(School of Computer and Information Science, Hubei Engineering University, Xiaogan, Hubei 432000,Chin)

机构地区：[1]湖北工程学院计算机与信息科学学院,湖北孝感432000

出　　处：《湖北工程学院学报》2016年第6期57-61,共5页Journal of Hubei Engineering University

基　　金：国家自然科学基金(61370092);湖北省教育厅人文社科项目(15Y141);湖北高校大学生创新创业训练计划项目(201510528026)

摘　　要：针对云计算模式下用户访问安全问题,以传统的基于角色的访问控制模型为基础,将可信机制与角色相结合,提出一种面向云计算的信任-角色的访问控制模型T-RBAC(Trust-Role Based Access Control)。该模型根据信任值决定当前用户是否可以访问,拥有独立的信任管理中心,在进行角色映射和权限授予之前,首先判断用户的可信性,可信性达不到阈值,就不授予资源访问权限,有效防止了可信性比较低的用户非法攻击系统带来的损害,减轻了网络拥塞程度,增强访问控制模型的抗干扰能力和吞吐量,降低网络延迟,在一定程度上提升了系统的工作效率。With focus on the issue of user access security against cloud computing mode and on the base of traditional role-based access control model,a trust-role based access control model T-RBAC is proposed by the combination of trusted mechanism and role.The model owns independent trust management center which could first of all judge user credibility before role mapping and permission granting.If user＇s credibility did not reach the threshold value,the user would not receive the permission for resource access,which would effectively prevent potential damage from illegal attack launched by the users who own relatively minor credibility,effectively ease network congestion,enhance the ability to resist interference and the throughput of the access control model,shorten network delay and improve the system efficiency to some extent.

关 键 词：云安全 可信机制 角色 访问控制 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]