远程计算系统的访问控制策略研究

An Access Control Policy for Remote Computing System

文章根据远程计算系统的结构,分析了它的安全问题,并结合基于角色的访问控制方法,提出了一种适合于该系统的RBAC层次模型。在实现过程中本文利用一种基于关系代数角色授权的方法,避免角色分配时角色之间的冲突以及保证角色撤销的完全性。同时,结合任务代理来进一步提高系统安全性。

This paper discusses the security problem of Remote Computing System according to its architecture, and presents the Role-Based Access Control (RBAC) hierarchy model applied to Remote Computing System. In order to avoid the conflicts among roles while assigning roles to different users and guarantee the operation of role revocation against imperfection, the paper uses a role allocation approach for RBAC implemented by relational algebra operations. At the same time, the security of Remote Computing System is improved through the combination of task agent conception.