零信任架构下基于属性的访问控制在远程急救中的应用  

Application of Attribute-Based Access Control in Remote First Aid under Zero-Trust Architecture

作　　者：章俊 ZHANG Jun(The First Affiliated Hospital of Nanchang University,Nanchang Jiangxi 330006,China)

机构地区：[1]南昌大学第一附属医院,江西南昌330006

出　　处：《通信技术》2023年第2期250-254,共5页Communications Technology

基　　金：江西省卫生健康委科技计划项目(202210354)。

摘　　要：为了解决在远程急救场景下,医疗物联网设备如何安全访问医院内部网络资源的问题,提出了将基于属性的访问控制模型融入到零信任架构中的方法。通过对访问主体、资源、操作权限和环境等属性集合的持续性综合评估,实现物联网设备的动态授权访问。同时,提出了未知场景下的二次验证,打破了以往非黑即白的决策。最后,将零信任平台与传统边界防护设备联动,安全能力共享,构建全方位的安全体系架构,保障医疗隐私数据的安全。To address the problem of secure access to hospital internal network resources by medical IoT devices in remote emergency scenarios,this paper proposes to integrate attribute-based access control model into zero-trust architecture.The scheme enables dynamic authorized access to IoT devices through continuous and comprehensive evaluation of the set of attributes such as access subject,resource,operation authority and environment.Besides,this paper proposes a second verification in unknown scenarios,which breaks the previous black–or-white decision.Finally,the zero-trust platform is linked with conventional border protection devices to share security capabilities,thus building comprehensive security architecture and securing medical privacy data.

关 键 词：ABAC 物联网 零信任 动态授权 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]