摘要
针对系统中的访问控制体系由各种访问控制机制堆彻而成而带来的系统访问控制不一致问题,本文提出了全程一致访问控制的概念,随后给出了全程一致访问控制体系的结构、分工及准则,以指导全程一致访问控制体系的构建,然后采用了原型系统对全程一致的访问控制体系进行了验证.采用该体系,不但能有效发挥系统中各访问控制机制的优势,还能降低安全投入成本.
At present, many access control systems consist of a variety of access control mechanisms with no relation to each other, which cause the problem of inconsistency. To solve the problem, the paper presented the concept of full-process-consistent access control. Then, the structure, division and guidelines were introduced to guide the construction of full-process-consistent access control system. Finally, the system was verified using a prototype system. With this system, the advantages of various access control mechanisms could be effectively brought into play and the cost could be reduced.
出处
《北京工业大学学报》
EI
CAS
CSCD
北大核心
2010年第5期698-702,共5页
Journal of Beijing University of Technology
基金
国家'八六三'计划资助项目(2009AA01Z437)
国家'九七三'计划资助项目(2007CB311100)
中国科学院软件研究所信息安全国家重点实验室开放课题
关键词
访问控制
全程一致
SOC
访问控制路径
access control
full-process-consistent
SOC
access control path
