云服务中面向信任的动态访问控制博弈机制

Trust Oriented Dynamic Access Control Game Mechanism in Cloud Services

针对云计算环境下交互实体间的信任危机以及无法动态控制访问请求的问题,提出了一种基于信任的动态访问控制博弈机制.根据交互时间与交互次数两要素获得推荐信息的可靠性参数进而动态计算用户的信任值,通过信任值对应的信任等级对用户进行角色的激活与授权工作.为了防止恶意用户对云资源的破坏,将信任等级与动态调节因子引入收益函数对云环境下的博弈双方展开动态博弈分析,得到混合策略纳什均衡.访问控制机制根据混合策略纳什均衡实现访问请求的最终决策.在每次访问结束后对用户的信任值进行更新从而更好的实现动态云环境下的访问控制.实验结果表明,本文提出的博弈机制对恶意节点具有一定的约束效果并且能够对云用户的合法访问行为起到一定的激励作用.

Aiming at the trust crisis between interactive entities in cloud computing environment and the inability to dynamically control access requests,this paper proposes a dynamic access control game mechanism based on trust.This mechanism obtain the reliability parameters of recommendation information according to the interaction time and interaction times,and then calculate the user's trust value dynamically.The user's role is activated and authorized by the trust level corresponding to the trust value.In order to prevent malicious users from damaging cloud resources,the trust level and dynamic adjustment factor are introduced into the revenue function to conduct dynamic game analysis on both sides of the game in the cloud environment,and obtain the mixed strategy Nash equilibrium.According to the hybrid nash equilibrium,the access control mechanism obtains the probability of the legitimate access of the cloud user and the probability of the access granted by the cloud service provider,and compares the two probabilities with the threshold value respectively,so as to realize the final decision of the access request.At the end of each visit,the user's trust value is updated to better achieve access control in dynamic cloud environment.The experimental results show that the game mechanism proposed in this paper has a certain constraint effect on malicious nodes,and can play a certain incentive role on the legitimate access behavior of cloud users.