安全组策略管理

Policy Management in Secure Group Communication

安全组通信的前提是一致的安全策略。组安全策略描述成员的安全目标、能力和需求,进而规定安全组的行为、访问控制参数、密码机制等。本文研究安全组策略的管理,包括组策略的制定、协商以及翻译、执行。在策略生命周期的基础上,依据安全多播组模型,提出组策略管理模型,并描述策略服务器的设计实现。策略的表示采用组安全策略标记语言(GSPML),能够支持组策略灵活的表示和协商。

Secure group communication is based on a consistent security policy. A security policy is a statement of a communication participant's security desires,abilities,and requirements. More explicit,a policy defines the group se- curity relevant behaviors,access control parameters,and security mechanisms. This paper considers policy manage- ment in security group communication,include of policy define,reconciliation, translation and enforcement. Based on policy life-cycle and group model,a policy management framework is presented. GSPML is used in the framework to specification group policies.