基于RBAC的多域策略冲突及其检测方法

Multi-domain Policy Conflicts and Detection Methods Based on RBAC

针对多安全域之间的访问控制问题提出了策略冲突分类及其检测方法。研究了基于RBAC的多域安全互操作模型及其安全特性,分析了由于引入角色映射带来的策略冲突并对这些冲突进行分类。根据多域环境的特点将安全域角色系统抽象成有向图,利用有效角色系统和角色层次关系,提出了基于角色系统有向图的策略冲突检测方法。最后对方法的计算复杂度进行了分析并给出策略冲突的解决方法。

For the access control in multi-domain, this paper proposes a method for policy conflicts classification and detection. The secure interoperation model based on RBAC and its security characteristics are studied, the policy conflicts resulted from the introduction of role mapping are analyzed and classified. The role system is abstracted as directed graph, and the effective roles and role hierarchy are utilized to propose a method based on directed graph of role system for detecting policy conflicts. Finally, the computational complexity？of the proposed method is analyzed, and the solutions for policy conflicts are given.