期刊导航

论文摘要

周境有关的使用控制研究

Study of Contextual Usage Control

作者:罗霄峰(四川大学 数学学院;四川大学 锦江学院);李琳(四川大学 计算机学院);罗万伯(四川大学 计算机学院)

Author:Luo Xiaofeng(College of Mathematics,Sichuan Univ.;College of Jinjiang,Sichuan Univ.);Li Lin(College of Computer Sci.,Sichuan Univ.);Luo Wanbo(College of Computer Sci.,Sichuan Univ.)

收稿日期:2013-03-15          年卷(期)页码:2013,45(4):103-110

期刊名称:工程科学与技术

Journal Name:Advanced Engineering Sciences

关键字:信息安全;访问控制;使用控制(UCON);周境

Key words:information security;access control;UCON (usage control);context

基金项目:国家自然科学基金委员会、中国工程物理研究院联合基金资助项目(1007611)

中文摘要

访问控制是信息安全的关键技术之一。对多种访问控制模型进行比较,并重点剖析了称为下一代访问控制模型的UCON(usage control,使用控制),指出其在抓住态势、反映动态性等方面的不足,用周境(context)代替一般化的系统和环境,以解决UCON在动态性方面的不足;引入管理功能,使管理与控制在一定程度上结合起来。CUC的体系结构由2类功能块组成,1类用于主体、客体和周境属性的管理,称为管理块;1类用于访问控制本身,称为控制块。管理块和控制块之间采用松耦合。在概念描述基础上,采用代数方法对CUC的句法和语义进行了形式化描述。给出了简单的应用例,说明其可用性。

英文摘要

The weaknesses of usage control (UCON) model was pointed out,and the context was introduced to replace a generalized system and the environment in UCON to extend it into a contextual usage control(CUC) model.The management function was also introduced,enabling management and control to some extent together.CUC’s architecture includes two major functional blocks,one called as management block for the management of attributes of subjects,objects and contexts,and the other called as control block for access control itself.There is loosely couple between the two functional blocks.After the conceptual description of CUC,an algebra approach was used for formal description of CUC syntax and semantics.

关闭

Copyright © 2020四川大学期刊社 版权所有.

地址:成都市一环路南一段24号

邮编:610065