基于信任域的分布式安全访问控制的研究与实现

Research and Implementation of Distribute Secure Access Control Based on Trust Domain

多域环境下的访问控制是域间互操作必须要解决的重要问题。针对数据交换平台项目中政府机构存在的地域和职能域不同的管理级别,构造了地域职能域融合确定信任域的方法,并通过制定基于角色的访问控制策略实现对跨域数据交换中心系统中域资源的不同权限安全访问。

Access control based on multi-domain environment is an important issue when inter-operate across the domains. The different manage-levels of the region and department in the government are focued on. A method to integrate region and department to define trust domain is presented, and security access control strategy based on RBAC is defined, to access different domains with different privilege.