基于模糊综合控制的UCONF模型构建与分析

UCONF Model Construction and Analgsis Based on Fuzzy Integrated Control

提出了基于模糊综合控制的UCONF(usage control fuzzy)模型,同时给出了基于模型的引用监视器.该模型保留了使用控制模型的过程连续性和属性可变性.利用模糊综合逻辑计算可信度,通过可信度简化了UCON的授权策略,可动态改变所授权利,方便权利授予或撤销,增强了模型的可管理性和可实施性.分析表明本模型充分体现了开放式网络环境中主体间的可信关系,适合解决动静结合的访问控制问题,确保了信息系统的安全控制.

oses a UCONF（usage control fuzzy） model based on fuzzy comprehensive control,and gives reference monitors of the model.The model uses fuzzy integrated logic to compute credibility,by which the authorization policy of UCON is simplified.As a result,the rights authorized can be changed dynamically,which may facilitate the granting or revoking of rights.The manageability and excutability of the model can be also enhanced therein.Analysis shows that this model fully reflects trusting relationship between subjects in the open-network environment,resolves the access control issues of combining static and dynamic methods,and ensures the security control of information system.