主动节点资源访问控制策略

Access Control Policy for Active Node Resources

主动网络的灵活性使主动网络面临更加严峻的资源安全问题,尤其是主动节点方面.分析了主动节点资源访问的研究现状和存在的问题,设计了一种主动节点资源访问控制机制.提出利用权能对资源访问控制策略进行描述,动态维护.对用户的管理采用基于角色的方法.在主动信包中封装用户角色信息,主动节点解析出用户角色后,依据它在策略库中匹配相应的描述控制访问权限策略的方法,即权能.通过权能实现对节点资源的访问.

The mobile of active networks raise considerable safety and security problems,especially in active node. This paper analyses the access control research actuality and problems for active node resources,and designs the safety and security architecture of access control for active node resources. This paper describes the policy of resource access control with capability, so the policy has dynamic maintenance characteristic. The method for access control based on the roles is adopted in user management. After decoding the user role encapsuled in active packet, we can obtain the method describing policy of access control in policy store, called capability. Access control for active node can be completed by capability.