CT-RBAC:一种云计算环境下的访问控制模型

CT-RBAC:An Access Control Model in Cloud Computing

云计算的开放性、共享性等特点,使云计算环境下的访问控制比传统环境下的访问控制更加复杂.为了保证访问过程中云用户以及云服务器上数据的安全性和可靠性,提出了一种云计算环境下的访问控制模型(CTRBAC).划分了云服务器上数据和云用户的安全级别,引入了任务情景集,从5个角度来实现访问控制策略,最后给出了云用户访问云端数据的实现流程.分析结果表明CT-RBAC具有明显的优点.该方案提高了客体拥有者对云服务器的监控能力,保证了云环境下数据的安全性和可靠性,并且具有较好的灵活性.

The characteristics of cloud computing such as openness,sharing,make the access control more complicated in cloud computing than it in traditional environment.In order to guarantee the security and reliability of cloud users and the data on the cloud server in the accessing process,this paper put forward an access control model named CT-RBAC in cloud computing.This scheme divided the security level of the data on the cloud server and cloud users,and introduced the set of task situation,what′s more,it achieved the access control policy from five aspects.Finally,it gave out the implementation process of cloud users access the data in the cloud.The analysis results indicate that CT-RBAC has its obvious advantages.This scheme improves the monitoring ability of the object owner to the cloud server,guarantees the security and reliability of data,and ensures the well flexibility.