基于动态情景网关的系统协同访问控制模型

doi:10.3969/j.issn.1000-436x.2013.z1.018

Abstract

Abstract:

In order to adapt the centralized access control between the application system subject and object in the envi-ronment of network configurations, a dynamic situation based system cooperation access gatel model — DSGAC was proposed. To begin with, the constitution of dynamic situational factors of access controls in the application systems of network configurations was analyzed, defining the factor of situation from muti-perspective. Furthermore, the concept of dynamic situational finite state machine was provided and a system cooperation access gatel model supporting calcula-tions and rules of the situation was presented under the constraint of dynamic situations. Finally, the real case application shows the feasibility and validation of the DSGAC model between the application systems. Additionally, the relative in-novativeness between DSGAC model and existing access control models was summerized.

Key words: situation gatel, system cooperation, access control, situation calculation, finite state machine

Shu-hang GUO,Yu ZHANG. Dynamic situation gateway based system cooperation access gatel model[J]. Journal on Communications, 2013, 34(Z1): 142-147.

Figures/Tables 4

op	操作说明
情景初始	$I n i t (S) \mapsto S_{0}$
情景更新	Update(S_i?1 ,S_i)，其中S_i-1,S_i两者权限、使用约束、前置需求与使用条件有区别
情景授权	Deploy (Subject_x,S_i,Object_y)
情景撤权	Destroy (Subject_x,S_i,Object_y)
情景代理	Delegate (Subject_x ,Subject_w),t∈(t_m,t_n)
情景转发	Derive (Subject_x,Subject_w),t∈(t_m,t_n)

References 11

[1]	SANDHU R , COYNE E J , FEINSTEIN H L , et al. Role-based access control models[J]. IEEE Computer, 1996,29 (2):38-47.
[2]	SANDHU R , MUNAWER Q . The ABRAC99 model for role based administration of roles[J]. ACM Transactions on Information and Sys-tem Security, 1999,2 (1):105-135.
[3]	PANG C Y , HANSEN D , MAEDER A . Managing RBAC States with transitive relations[A]. Proceedings of the 2nd ACM Sym-posium on Information, Computer and Communications Security(ASIACCS'07)[C]. Singapore, 2007.139-148.
[4]	JOSHI J B D , BERTINO E , LATIF U , et al. A generalized temporal role-based access control model[J]. IEEE Transactions on Knowledge and Data Engineering, 2005,17 (1):04-23.
[5]	王小明，赵宗涛．基于角色的时态对象存取控制模型[J]．电子学报， 2005,09,33(9):1634-1638. WANG X M , ZHAO Z T . Role-based access control model of tempo-ral object[J]. Acta Electronica Sinica, 2005,09,33(9):1634-1638.
[6]	许峰，赖海光，黄皓等．面向服务的角色访问控制技术研究[J]．计算机学报， 2005,28(4):686-693. XU F , LAI H G , HUANG H , et al. Service-oriented role-based access control[J]. Chinese Journal of Computers, 2005,28(4):686-693.
[7]	徐伟，魏峻，李京．面向服务的工作流访问控制模型研究[J]．计算机研究与发展， 2005,42(8):1369-1375. XU W , WEI J , LI J . A service-oriented workflow access control model[J]. Journal of Computer Research and Development, 2005,42(8):1369-1375.
[8]	李晓峰，冯登国，陈朝武等．基于属性的访问控制模型[J]．通信学报， 2008,29(4):90-98. LI X F , FENG D G , CHEN Z W , et al. Model for attribute based access control[J]. Journal on Communications, 2008,29(4):90-98.
[9]	KERN A , WALHORN C . Rule support for role based access con-trol[A]. Proceedings of the Tenth ACM Symposium on Access Control Models and Technologies[C]. Stockholm, Swden, 2005.38-130.
[10]	YUAN E , TONG J . Attributed based access control(ABAC)for Web service[A]. Proceedings of the 2005 IEEE International Conference on Web Services[C]. Orlando FL, USA, 2005.561-569.
[11]	DOUGHERTY D J , FISLER K , KRISHNAMURTHI S . Specifying and reasoning about dynamic access-control policies[A]. 3rdInterna-tional Joint Conferenceon Automated Reasoning(IJCAR)[C]. Seattle, USA, 2006.632-646.

Metrics

Recommended 0

No Suggested Reading articles found!

[1]	Wei JIN, Fenghua LI, Mingjie YU, Yunchuan GUO, Ziyan ZHOU, Liang FANG. HDFS-oriented cryptographic key resource control mechanism [J]. Journal on Communications, 2022, 43(9): 27-41.
[2]	Jiangtao DONG, Peiwen YAN, Ruizhong DU. Verifiable access control scheme based on unpaired CP-ABE in fog computing [J]. Journal on Communications, 2021, 42(8): 139-150.
[3]	Changgen PENG, Zongfeng PENG, Hongfa DING, Youliang TIAN, Rongfei LIU. Attribute-based revocable collaborative access control scheme [J]. Journal on Communications, 2021, 42(5): 75-86.
[4]	Zuobin YING, Yuanping SI, Jianfeng MA, Ximeng LIU. Blockchain-based distributed EHR fine-grained traceability scheme [J]. Journal on Communications, 2021, 42(5): 205-215.
[5]	Ruizhong DU, Peiwen YAN, Yan LIU. Fine-grained attribute update and outsourcing computing access control scheme in fog computing [J]. Journal on Communications, 2021, 42(3): 160-170.
[6]	Jiawei ZHANG, Jianfeng MA, Zhuo MA, Teng LI. Time-based and privacy protection revocable and traceable data sharing scheme in cloud computing [J]. Journal on Communications, 2021, 42(10): 81-94.
[7]	Tianyi ZHU,Fenghua LI,Wei JIN,Yunchuan GUO,Liang FANG,Lin CHENG. Cross-domain access control policy mapping mechanism for balancing interoperability and autonomy [J]. Journal on Communications, 2020, 41(9): 29-48.
[8]	Qinglei ZHOU,Shaohuan BAN,Yingjie HAN,Feng FENG. Mimic defense authentication method for physical access control [J]. Journal on Communications, 2020, 41(6): 80-87.
[9]	Chunfu JIA,Guanxiong HA,Ruiqi LI. Data access control policy of encrypted deduplication system [J]. Journal on Communications, 2020, 41(5): 72-83.
[10]	Yonggui FU,Jianming ZHU. Design for database access control mechanism based on blockchain [J]. Journal on Communications, 2020, 41(5): 130-140.
[11]	Zheng GUAN,Lei XIONG,Yao JIA,Min HE,Zhijun YANG. Research on scheduled WLAN MAC protocol with failure retries on RoF-DAS architecture [J]. Journal on Communications, 2020, 41(3): 102-111.
[12]	Rongna XIE,Hui LI,Guozhen SHI,Yunchuan GUO. Attribute-based lightweight reconfigurable access control policy [J]. Journal on Communications, 2020, 41(2): 112-122.
[13]	Aodi LIU, Xuehui DU, Na WANG, Rui QIAO. ABAC access control policy generation technique based on deep learning [J]. Journal on Communications, 2020, 41(12): 8-20.
[14]	Rongna XIE, Hui LI, Guozhen SHI, Yunchuan GUO, Ming ZHANG, Xiuze DONG. Blockchain-based access control mechanism for data traceability [J]. Journal on Communications, 2020, 41(12): 82-93.
[15]	Hongfa DING,Changgen PENG,Youliang TIAN,Shuwen XIANG. Privacy risk adaptive access control model via evolutionary game [J]. Journal on Communications, 2019, 40(12): 9-20.

Dynamic situation gateway based system cooperation access gatel model

RichHTML

PDF

Knowledge

Cited

Abstract

Cite this article

share this article

Figures/Tables 4

References 11

Related Articles 15

Metrics

Recommended 0