一种基于可信度计算的集成身份认证与访问控制的安全机制

A Security Mechanism Integrating Authentication with Access Control Based on Certification Factor

提出了一种基于主体可信度计算的集成身份认证和访问控制的安全机制,当主体的可信度下降到某个值之后,采用一次性口令认证方法对主体进行重新认证。该安全机制能有效提高访问控制模型对冒充用户访问的检测及控制能力。

A new kind of security mechanism integrating authentication with access control based on certification factor is proposed. When the subject＇s certification factor decreases to a certain value, a one-way password authentication is required. This security mechanism can effectively improve the ability of access control model to detect and control a pseudo-user,