智慧社区中的跨域访问控制模型研究

The Research on Cross-Domain Access Control in the Smart Community

智慧社区是智慧城市的基本构成单元之一,其以基于信息的居家服务为核心,涵盖了生活服务、行政管理、信息资源共享、商业交易等多项功能,构成一个跨域的异构网络系统。对于智慧社区而言,跨域访问控制机制是保证其各项功能正常进行的基础,而目前所广泛采用的基于角色的跨域访问控制中存在着隐蔽提升等安全问题,且灵活性不高。为提高智慧社区跨域访问控制的安全性与灵活性,提出了基础角色映射概念,并建立基于基础角色的跨域访问控制模型。该模型中跨域访问用户通过基础角色映射获得基础访问权限,在此基础上可通过申请附加角色获得基础权限之外的访问资源。模型通过基础角色映射有效地提高了跨域访问效率,降低了隐蔽提升的可能性,利用附加角色申请确保授权的动态性,从而在保证安全性和效率的同时又使其具有了一定的灵活性。

Smart community is the basic unit of smart city, its core is honae service based on hltbrmation. The smart community is a crossdomain heterogeneous network, including living service, administration, information resource sharing, commercial transaction, and so on. For smart comanunity, cross-domain access control is the basic to ensure the smart community＇s norlnal operation. At present, the rolebased access control is widely used, but there are hidden promotion and other Problem in it. To promote the smart community＇s safety and flexibility, the conception of basic role mapping is proposed; and the cross-domain access control model based on the basic role is constructed. In this model, the cross-domain user gets basic access permissions by basic role mapping, and then gets other permissions by get additional role. The model improves cross-domain access efficiency and reduces the possibility of implicit promotion by basic role mapping, and ensures the authorization＇s dynamics by additional role. Thus this model gets higher safety, efficiency and flexibility.