跨域访问控制技术研究  

Research on cross-domain access control technology

作　　者：诸天逸 李凤华[1,2] 成林 郭云川 ZHU Tianyi;LI Fenghua;CHENG Lin;GUO Yunchuan(Institute of Information Engineering,Chinese Academy of Sciences,Beijing 100195,China;School of Cyber Security,University of Chinese Academy of Sciences,Beijing 100049,China;China Information Technology Security Evaluation Center,Beijing 100085,China)

机构地区：[1]中国科学院信息工程研究所,北京100195 [2]中国科学院大学网络空间安全学院,北京100049 [3]中国信息安全测评中心,北京100085

出　　处：《网络与信息安全学报》2021年第1期20-27,共8页Chinese Journal of Network and Information Security

基　　金：国家重点研发计划(2016QY06X1203);国家自然科学基金(U1836203);山东省重点研发计划(重大科技创新工程)(2019JZZY020127)。

摘　　要：根据国内外最新研究,对跨域数据流动中的访问控制技术进行了总结和展望。首先,结合复杂应用环境下的访问控制,概括了访问控制模型、数据安全模型的发展。其次,分别从数据标记、策略匹配和策略冲突检测方面对访问控制策略管理的研究展开论述。最后,总结归纳了统一授权管理中数据标记技术和授权与延伸控制技术的研究现状。Based on the latest research at home and abroad,the access control technology in cross-domain data flow were summarized and prospected.Firstly,combined with access control in complex application environments,the development of access control models and data security modelswere summarized.The advantages and disadvantages of access control policy management were analyzed.Secondly,the research on access control policy management from the aspects of data marking,policy matching and policy conflict detection were discussed respectively.Finally,the research status of data marking technology and authorization and extension control technology in unified authorization management were summarized.

关 键 词：跨域数据流动 访问控制模型 策略授权管理 

分 类 号：TN929[电子电信—通信与信息系统]