智慧学习环境移动智能终端零信任安全机制改进方案  

The Improvement of the Zero-Trust Security Mechanism for Mobile Smart Terminals in a Smart Learning Environment

作　　者：王建军[1] 罗治华 周夏 WANG Jianjun;LUO Zhihua;ZHOU Xia(Hunan First Normal University,Changsha Hunan 410205,China;Hangzhou Yinggao Technology Company,Hangzhou Zhejiang 310063,China)

机构地区：[1]湖南第一师范学院,湖南长沙410205 [2]杭州盈高科技有限公司,浙江杭州310063

出　　处：《通信技术》2021年第12期2692-2697,共6页Communications Technology

基　　金：湖南省教育厅科学研究重点项目“智慧学习环境中移动智能终端基于风险评判的权限管理技术研究”(17A040)。

摘　　要：零信任安全架构为智慧学习环境提供了全面的解决方案,但是零信任依赖的角色权限管理机制还是不能满足学生自主学习的一些特殊安全需求,因此提出一种零信任安全机制改进方案。该方案以角色信任权限管理机制为基础,以主观信任风险、客观信任风险和信任风险评判移动智能终端的风险值,如果风险可控,则对移动智能终端实施弹性授权,允许移动智能终端在权限不够的情况下,继续完成访问行为,从而满足智慧学习环境学生自主学习的需要。最后,使用案例说明智慧学习环境移动智能终端弹性授权的实施过程,证实弹性授权的可行性和实践意义。The zero-trust security architecture provides a comprehensive solution for the smart learning environment,but the role authority management mechanism that the zero-trust relies on still cannot meet the special security requirements of students'independent learning.Therefore,a zero-trust security mechanism improvement plan is proposed.The scheme is based on the role trust authority management mechanism,and judges the risk value of mobile smart terminals based on subjective trust risk,objective trust risk and trust risk.If the risk is controllable,it will implement flexible authorization for mobile smart terminals,allowing the mobile smart terminal to continue to complete the access behavior when the authority is insufficient,so as to meet the autonomous learning needs of students in the smart learning environment.Finally,cases are used to illustrate the implementation process of flexible authorization for mobile smart terminals in the smart learning environment,and prove the feasibility and practical significance of flexible authorization.

关 键 词：智慧学习环境 移动智能终端 零信任 风险评判 弹性授权 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]