协作环境下的时空约束强制访问控制模型  

Temporal-Spatial-based Mandatory Access Control Model in Collaborative Environment

作　　者：范艳芳[1,2] FAN Yan-fang(Computer School, Beijing Information Science and Technology University, Beijing 100101, China Beijing Key Laboratory of Internet Culture and Digital Dissemination Research,Beijing 100101,China)

机构地区：[1]北京信息科技大学计算机学院,北京100101 [2]网络文化与数字传播北京市重点实验室,北京100101

出　　处：《计算机科学》2017年第8期107-114,共8页Computer Science

基　　金：国家自然科学基金面上项目(61672106);网络文化与数字传播北京市重点实验室开放课题(ICDD201609);北京市教委科研计划项目(KM201711232014);北京市自然科学基金项目(9021723401)资助

摘　　要：安全的信息共享对信息系统而言至关重要。协作环境下的关键应用对信息共享和信息安全提出了更高的要求。已有的基于BLP模型的强制访问控制模型均无法满足协作环境下关键应用的访问控制需求。因此提出一种协作环境下的具有时空约束的强制访问控制模型,将任务、时间、空间等要素进行综合考虑,从而将逻辑安全和物理位置相结合,既增强了访问控制模型的安全性,又满足了协作环境下访问控制的灵活性。采用无干扰理论对所提模型的安全性进行了证明。Secure information sharing is a common goal for any information system.Critical applications in the collaborative environment put forward higher requirements for security and flexibility of information sharing.The existing mandatory access control model based on BLP model can＇t meet the requirements of access control for critical applications in collaborative environment.In this paper,a temporal-spatial-based mandatory access control model was proposed,which integrates task,time with space issues into access control model.Logic security is integrated with physical location in this model.So,it not only can enhance the security of access control,but also meets the flexibility of access control in collaborative environment.The security of the model was proved with non-interference theory.

关 键 词：协作 强制访问控制 主动安全模型 时空约束 信息流 任务 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]