基于岗位映射的应急组织间跨域访问控制研究

Study of Cross-domain Access Control Among Emergency Organizations Based on Position-mapping

突发事件由于其自身特点,需要多组织、多部门来完成相应的应对、协调、善后等应急管理活动,但当前基于RBAC模型的应急组织间跨域访问控制,存在权限循环继承冲突、职责分离冲突和异构冲突等安全问题。通过总结应急管理系统的实际开发经验,从组织管理的岗位出发,提出基于岗位映射的应急组织间跨域访问控制机制。在分析应急组织间跨域访问控制机制具体实现流程的基础上,讨论其如何有效解决上述安全冲突问题,并结合某市应急管理平台的实际处理流程,验证了该机制的正确性和可行性。

Due to its characteristics, the emergency management needs a great deal of inter-operation and coordination in a multi-domain environment. But the current solution that based on the Role-based Access Control（RBAC） induces the following security conflicts, which are cyclic inheritance, separation of duties and modality conflicts. Through a large number of experiences in developing emergency management information systems, this paper uses the method of organizational management and proposes a multi-domain access control mechanism based on the position. Via the analysis of the specific implementation process, it focuses on the resolution to deal with the security conflict problems, and combining with the practical application case to test and verify its correctness and feasibility.