摘要
针对当前域间安全互操作中存在的不足,如不同粒度控制域之间的用户进行安全互操作时,带来的身份识别和规则冲突等一系列的问题,提出一种基于角色的安全互操作模型:RBSIM。在该模型中,引入角色,实现用户权限的分离,方便管理,角色--权限进行二次指派,方便系统对用户行为的细粒度控制。同时,该模型可解决安全域之间规则约束、粒度冲突等问题。用户通过发送请求申请访问资源,通过证书认证分配角色授予权限。角色的引入在带来管理方便的同时,充分解决了粗细粒度控制的冲突问题。
Based on the existing problems,for an instance,when domains have different security granularity,it may bring trouble to secure interoperability,such as undefined user type,policy conflicts,and so forth,a role based secure interoperability model（RBSIM） is proposed.In the model,the concept of role is introduced to realize the separation between user and privileges.At the same time,the reassignment between role and privileges is convenient to manage user’s action with fine-grain.Meanwhile,the model can deal with rule-restriction and granularity conflicts among multi secure domains.Users get the resource by sending access request and authenticate each other by credentials.Role introduction not only helps domain management,but also handles conflicts deriving from different security granularity.
出处
《计算机工程与设计》
CSCD
北大核心
2010年第3期483-485,共3页
Computer Engineering and Design
关键词
认证
角色
安全互操作
授权
访问控制
authentication
role
secure interoperability
authorization
access control
