云计算中基于否定规则的访问控制技术的研究

RESEARCH ON DENY RULE-BASED ACCESS CONTROL TECHNOLOGY IN CLOUD COMPUTING

数据的安全性和隐私保护给云计算领域带来了极大挑战,为实现合作企业间在云环境下公开共享部分数据且不涉及保密信息,提出一种基于否定规则的访问控制技术。主要思想是通过判断访问查询是否授权,检测授权与否定规则是否存在冲突,来达到阻止非法访问的目的。理论分析和实验结果表明该机制能有效地保障云数据的安全。

The security of data and the privacy protection bring huge challenges to cloud computing field. In order to implement part sha- ring of the data publicly among the cooperative enterprises in cloud environment without involving into confidential information, in this paper we provide an access control method which is based on negative rules. The main idea of the method is to detect whether the authorisation con- flicts with the negative rules through judging the authorisation of access and query so that to reach the goal of preventing the illegal accesses. Both the theoretical analysis and experimental results show that this mechanism can ensure the security of cloud data effectively.