多域环境下安全互操作研究进展

Research Development on Secure Interoperation in Multi-domain Environment

多域安全互操作是通过认证机制、访问控制机制和审计机制来实现多个分布、异构、自治区域间安全的资源共享和信息交互的过程。系统介绍了这一新型研究领域的理论基础和应用现状,从解决访问控制安全和域间策略冲突的角度,对域间角色转换技术、基于信任管理、基于PKI和基于时间限制等方向的多项研究成果和关键技术进行分析和点评,重点探讨了多域环境下各自治域间策略集成算法的建模和实现,最后针对目前研究工作中存在的问题,对该领域未来的发展方向和趋势做出展望。

Secure interoperations in Multi-domain can share resources and communicate information in multi distributed, heterogeneous, and autonomy domains, which depends on authentication, access control, and audit mechanisms. A comprehensive survey of research on this novel approach was presented to solve the conflicts of secure policies of domains, and some basic techniques, e. g. role-mapping technique between domains, trust management, Public Key Infrastructure and temporal role based access control,were introduced and compared. Mainly discussed model and architecture of policy-integration in multi-domain. Finally, the trend of research was discussed, which is based on the shortcomings and problems of current research.