“长城”安全政策的扩充研究及其实现  

Research and Enforcement of Enhanced Chinese Wall Security Policy

作　　者：赵庆松[1] 孙玉芳[1] 梁洪亮[1] 张相锋[1] 孙波[1] 

机构地区：[1]中国科学院软件研究所,北京100080

出　　处：《电子学报》2002年第11期1658-1662,共5页Acta Electronica Sinica

基　　金：国家 8 63高科技项目 (No.863 30 6 ZD1 2 1 4 2 ) ;国家自然科学 (No .60 0 730 2 2 ) ;中国科学院知识创新工程项目 (No.KGCX1 0 9)

摘　　要：“长城”安全政策 (ChineseWallSecurityPolicy,CWSP)是商业信息领域中重要的安全政策之一 .但是Brew er Nash提出的CWSP并不能很好地满足实际的需要 .基于角色的访问控制 (Role BasedAccessControl,RBAC)模型是一种“政策中性 (PolicyNeutral)”的模型 ,被看作是最有可能替代传统的自主和强制访问控制模型的一种全新的模型 ,正越来越被信息安全领域所重视 .本文首先介绍了RBAC和“长城”安全政策 ,然后根据实际应用对CWSP作了系统的扩充 ,最后本文系统地论述了基于RBAC的扩充CWSP的实现方法 .Chinese Wall security policy (CWSP) is one of the most important security policies in commercial information area. But the CWSP proposed by Brewer and Nash can't fully meet the practical requirement. The role-based access control (RBAC), a policy neutral model, recently receives considerable attention as a most promising alternative to traditional discretionary access control (DAC) and mandatory access control (MAC) models. RBAC and the Chinese Wall security policies are given, and expanded due to the practical application. The RBAC-based method to expand CWSP is systematically discussed. Thus, the enhanced CWSP (ECWSP) is presented firstly. And then the method of configuring RBAC to enforce the ECWSP is systematically studied.

关 键 词：信息安全 基于角色 访问控制 “长城”安全政策 RBAC CWSP 商业信息 

分 类 号：F713.51[经济管理—市场营销] TN91[经济管理—产业经济]