普适环境下的模糊访问控制模型研究

Research on fuzzy access control model for ubiquitous computing environments

现有的普适访问控制模型的研究都忽视了安全中存在的模糊性问题。在普适计算环境中上下文信息可能是不完备或者模糊的,因此由残缺或模糊的上下文信息推导授权结果就显得十分重要。在使用控制模型的基础上,提出了一个模糊的普适访问控制模型(fuzzy usage control models,FUCM),给出了模型的形式化定义,并通过实例对模型的授权过程进行分析。结果表明新的模型能够对模糊的上下文信息进行授权决策,并具有更智能的授权能力,更适用于普适计算环境。最后,给出了模型实现的参考监视器体系结构。

Ubiquitous computing will be looked as mainstream computing model in future. How to protect the data security is a key issue to extend ubiquitous computing. Usage control model（UCON）is as the next generation access control model, it is more fit in ubiquitous computing environment. But UCON is a lack of description of fuzzy security problem. In ubiquitous computing environment, context information may be imperfectly and fuzzy, so it is important to infer authorization result by imperfectly and fuzzy context information. Be based upon UCON, this paper gave a fuzzy access control model： FUCM, and gave a formalized model. The new model could deal with fuzzy context information, and it had more intelligent authorization.