一个环境适应的基于角色的访问控制模型

	一个环境适应的基于角色的访问控制模型
	吴新松; 贺也平; 周洲仪; 梁洪亮
	2011
发表期刊	计算机研究与发展
ISSN	10001239
卷号	48 期号:6 页码:983-990
摘要	大型网络应用如疫情报告系统需要访问控制系统根据环境变化调整访问控制策略,而现有的访问控制模型缺乏灵活性,难以适应环境动态变化的需要.通过对RBAC模型进行扩展,提出了一个环境适应的基于角色的访问控制模型EA-RBAC.该模型相对于传统RBAC模型,增加了事件触发、基于事件的状态等价类迁移、环境角色和虚拟域等机制.通过事件触发机制和状态等价类迁移实现了系统对环境变化的感知和随环境变化的状态迁移.通过环境角色和虚拟域的概念,实现了环境角色的动态调整和用户授权的按状态调整.该模型能够根据环境变化,在不失安全性的前提下为大型网络应用灵活实施访问控制策略.作为示例,给出了模型在疫情报告系统中的适用性分析.
其他摘要	Large scale network-based applications, such as infectious diseases reporting system, require that access control policy can be changed according to environment alternation. However, existing access control models are inflexible and can not be adapted to environment alternation because they are lack of mechanisms to capture environment alternation and to change access control policy. In this paper, we analyze the access control requirements of infectious diseases reporting system. Based on the analysis, we extract the general access control requirements of large scale network-based applications. Through extending RBAC model, we design the components of the environment-adaptive role-based access control model called EA-RBAC and give the formal definition of the model. Compared with traditional RBAC models, EA-RBAC model adds event-trigger, event-based equivalent states transition, environment role and virtual domain mechanisms. Through event-trigger and equivalent states transition, the system can perceive environment alternation and transit state based on environment alternation. Through environment role and virtual domains, the system can dynamically adjust environment role and user authorization based on current state. EA-RBAC model can enforce flexible access control policy for large scale network-based applications while holds security. Also, as an example, this paper gives the applicability analysis of EA-RBAC model in infectious disease reporting system.
关键词	访问控制环境适应 Rbac 环境角色虚拟域adaptive Control Systems Disease Control Security Systems Virtual Reality
部门归属	中国科学院软件研究所;中国科学院研究生院
语种	中文
内容类型	期刊论文
URI标识	http://ir.iscas.ac.cn/handle/311060/13787
专题	基础软件国家工程研究中心
推荐引用方式 GB/T 7714	吴新松,贺也平,周洲仪,等. 一个环境适应的基于角色的访问控制模型[J]. 计算机研究与发展,2011,48(6):983-990.
APA	吴新松,贺也平,周洲仪,&梁洪亮.(2011).一个环境适应的基于角色的访问控制模型.计算机研究与发展,48(6),983-990.
MLA	吴新松,et al."一个环境适应的基于角色的访问控制模型".计算机研究与发展 48.6(2011):983-990.

条目包含的文件
文件名称/大小	文献类型	版本类型	开放类型	使用许可
一个环境适应的基于角色的访问控制模型.p（1766KB）			开放获取	--	请求全文