以社区域为中心基于信任的访问控制

Community field-centric trust-based access control model

智能服务agent基于上下文感知的交互与协作为数字社区提供动态服务的同时,也带来了安全访问问题。在综合分析数字社区中agent的信任、社区域内外协作等特征的基础上,提出以社区域为中心基于信任的访问控制模型,即依据agent自身上下文及信任证书建立社区域,其后信任等级随会话动态调整,通过信任等级与信任阈值的匹配关系有效地控制权限的激活和使用。与最新研究成果相比,该模型突出的特点是实现动态权限控制,同时满足社区域内及社区域间角色的安全交互与协作。

Context-aware interaction and cooperation among agents provids digital community services. However, it also brings new problems of secure access. A novel community field-centric trust-based access control model （referred to as the CTBAC） was developed by thoroughly considering both the trust level of agent and the cooperation among agents in- side and outside of community fields in digital community. There are two novel ingredients. Firstly, a community field was established in terms of agent＇s own contexts and trust certificate. Thus, the trust level could be dynamically adjusted based on the sessions. Secondly, the activation and use of access control permissions according to the match relationship between the trust level of agents and trust threshold. The proposed CTBAC model was compared to several access con- trol models and its effectiveness in both dynamic permission control and security protection was demonstrated.