一种基于移动存储设备的多密级安全交互模型

Security Model for Multi-level Interaction Based on Portable Devices

针对不同密级设备间的信息交互问题,基于移动存储设备,提出了一种安全交互模型。该模型利用移动存储设备分区建立安全通信通道,将多密级交互问题转化为有序操作请求序列的控制问题。通过设定安全等级条件、分区与操作类别可识别条件构造分区读写控制函数,控制分区对交互区的读写;在此基础上,设计交互设备间的操作控制规则,从而建立起有效的双向可控的多密级信息安全交互机制,并给出理论证明。仿真实验结果表明,该模型能够实现多密级设备间信息的双向安全交互。

Aiming at the problem of information interaction between multi-security-level devices, a security model based on portable devices was proposed. In use of portable storage device partitions, this model established a security communication channel that transmitted the multi-level interaction problem to the problem of controlling ordered read-write operation sequences. By setting the condition of security level as well as the recognition of partitions and operation, the read-write function for partition was designed to control the read and write operation towards the interactive partition. Based on the above, by designing operation control rules between interaction devices, an effective and bidirectional controlled multi-level security interaction mechanism was built, and the theoretical prove was given. The results of simulations show that the model can realize controlled bidirectional transmission for multi-level information.