检索
E-mail
RSS
作者投稿和查稿 主编审稿 专家审稿 编委审稿 远程编辑

计算机工程 ›› 2013, Vol. 39 ›› Issue (2): 112-118.doi: 10.3969/j.issn.1000-3428.2013.02.023

• 安全技术 • 上一篇    下一篇

开放式环境下一种基于信任度的RBAC模型

邓文洋 1,2，周洲仪 1，林思明 1，刘金刚 1,2   

  1. (1. 中国科学院计算技术研究所，北京 100190；2. 首都师范大学计算机联合研究院，北京 100048)
  • 收稿日期:2012-07-04 修回日期:2012-10-08 出版日期:2013-02-15 发布日期:2013-02-13
  • 作者简介:邓文洋(1987－)，男，硕士研究生，主研方向：访问控制模型，数据安全；周洲仪，高级工程师、博士；林思明，副研究员、博士；刘金刚，教授、博士生导师
  • 基金项目:
    国家自然科学基金资助项目(60903139, 60933005)

An RBAC Model Based on Trust Degree in Open Environment

DENG Wen-yang 1,2, ZHOU Zhou-yi 1, LIN Si-ming 1, LIU Jin-gang 1,2   

  1. (1. Institute of Computing Technology, Chinese Academy of Sciences, Beijing 100190, China; 2. Joint Faculty of Computer Scientific Research, Capital Normal University, Beijing 100048, China)
  • Received:2012-07-04 Revised:2012-10-08 Online:2013-02-15 Published:2013-02-13

PDF

1043

被引次数

23 | 2

摘要： 在开放式环境中，用户和资源的高流动性会导致基于角色的访问控制(RBAC)模型在角色指派和权限控制方面异常复杂。为此，提出一种基于信任度的弹性RBAC模型。利用评价机制确定用户与资源间的直接信任度及资源之间的推荐信任度，综合2种信任度计算用户的信任度和资源的权威度，结合用户的访问记录，为用户分配合理的角色和权限，并采用加性增、乘性减算法动态调整实体的信任度，从而防止恶意行为。基于Query Cycle Simulator的实验结果证明，该模型可以保证评价的合理性和准确性。

关键词: 开放式环境, 访问控制, 评价机制, 信任度, 权威度, 基于角色的访问控制模型

Abstract: In open environment, the user nodes and resource nodes are variable, and it is almost impossible to check their priorities to access different kind of resources in the system in which the traditional Role Based Access Control(RBAC) model is adapted. To simplify the access control and standardize security strategy in open system, a flexible RBAC model based on trust degree is proposed. It uses the evaluation between the user node and resource node to calculate they direct trust, and employs the evaluation among the resource nodes to get the recommended trust of the resource nodes. Using the two trust values, together with the session history of user nodes and resource nodes, the system assigns the roles as well as its corresponding priorities for the user node flexibly. It adopts the Additive-increase, Multiplicative-decrease(AIMD) algorithm, which is widely used in TCP congestion control algorithm, in the trust evaluation to punish the node with malicious behaviors.

Key words: open environment, access control, evaluation mechanism, trust degree, authority degree, Role-based Access Control(RBAC) model

中图分类号: