基于策略分层的访问控制模型研究

RESEARCH ON POLICY HIERARCHY BASED ACCESS CONTROL MODEL

针对分布式环境的访问控制问题,讨论了一种基于策略分层的访问控制模型。该模型利用策略证书和使用条件证书实现分层的访问控制策略,利用公钥证书实现对用户的身份认证,结合角色证书实现对用户的授权访问。

Aiming at the access control in the distributed environment, a policy hierarchy based access control model is described. This model implements access control policies hierarchy by using policy certificate and use condition certificate, achieving user authentication by using PKC（ Public Key Certificate） , achieving user authorization by using role certificate.