面向医疗大数据基于零信任的UCON访问控制模型  

A UCON access control model based on zero trust for medical big data

作　　者：石秀金[1] 张梦娜 SHI Xiujin;ZHANG Mengna(College of Computer Science and Technology,Donghua University,Shanghai 201620,China)

机构地区：[1]东华大学计算机科学与技术学院,上海201620

出　　处：《智能计算机与应用》2021年第5期47-52,共6页Intelligent Computer and Applications

基　　金：上海市自然科学基金(19ZR1402000)。

摘　　要：医疗大数据的共享在现代医疗技术和服务中发挥着重要作用。针对医疗大数据共享过程中的安全性需求,提出了基于零信任和UCON的医疗大数据访问控制模型ZT-UCON。该模型将零信任思想与支持动态连续访问的UCON模型相结合,利用UCON模型的授权、义务和条件等访问控制策略,构建了面向医疗大数据访问控制决策方案。通过在医疗大数据访问控制的一个典型案例中应用ZT-UCON模型,并对比典型的传统访问控制模型,验证了ZT-UCON的优势。结果表明:基于零信任的UCON访问控制模型,可以降低医疗大数据共享过程中过度访问的可能性,以满足医疗大数据访问控制的安全性需求。The sharing of medical big data plays an important role in modern medical technology and services. According to the security requirements in the process of sharing medical big data,a medical big data access control model ZT-UCON based on zero trust and UCON was proposed. The model combines the idea of zero trust with the UCON model,which supports dynamic continuous access,and uses the access control policies of UCON model,such as authorization,obligation and condition,to construct a pre-decision scheme for the access control of medical big data;By applying the ZT-UCON model in a typical case of medical big data access control and comparing with the typical traditional access control model,the advantages of ZT-UCON are verified. The results show that the UCON access control model based on zero trust can reduce the possibility of excessive access issues in the process of sharing medical big data,so as to meet the security requirements of medical big data access control.

关 键 词：零信任 UCON 医疗大数据 访问控制 

分 类 号：TP393.4[自动化与计算机技术—计算机应用技术]