摘要
针对基于角色的访问控制(RBAC)的多域系统,提出了一套安全而高效的满足策略合成与冲突解决要求的角色映射机制。通过引入对等权限概念,明确了策略合成的目标;支持了基于混合角色层次的RBAC系统上的多域间策略合成;提出了权限非上升原则和角色映射的3个属性来使得角色映射细粒度化,同时获得安全的全局策略。所提出的算法在策略合成过程中,自动检测和避免了策略冲突,合成算法的复杂度低,便于实际应用。
For RBAC-based multi-domain systems, a reliable static role mapping mechanism that integrates multidomain policies without any constraint conflict is presented. By introduction of the equivalent permission concept, the goal of policy integration is defined, and the hybrid hierarchy is supported in this integration mechanism. The principle of non-rising permission and the role mapping attributes are proposed in order to achieve fine granulation and secure global policies. Due to the low algorithm complexity, this algorithm could be easily applied in practical scenarios.
出处
《信息安全与通信保密》
2012年第5期78-80,83,共4页
Information Security and Communications Privacy
基金
国家自然科学基金资助项目(批准号:60903191)
信息网络安全公安部重点实验室开放课题
