动态自适应访问控制模型

doi:10.11959/j.issn.1000-436x.2016220

Abstract

Abstract:

With the development of cloud computing technology, smart city and mobile office and emergence of mobile smart devices, the resources' environment is increasing complex. The traditional access control model has been difficult to meet the diverse access control requirements and the dynamic and adaptive access control policy. A dynamic and adap-tive access control model combining the resource life cycle management based on ABAC was proposed. The model fo-cused on resource life cycle management considering the relevance of the resource life cycle management and access control policy. In this model, the policy can be changed as the resource life cycle states' change, so the applicability has been improved. In addition, the user access behavior history management function was added in this model, which can adapt the environment better by considering history of user access behavior. At last, the model in general and cloud com-puting access control system was implemented and verified.

Key words: access control, action-based access control model, resource life cycle, dynamic adaptation, user access be-havior history

Guo-zhen SHI,Hao-jie WANG,Yun-fei CI,Si-shui YE,Yun-chuan GUO. Dynamic and adaptive access control model[J]. Journal on Communications, 2016, 37(11): 49-56.

Figures/Tables 8

References 14

[1]	SANDHU R S , COYNE E J , FEINSTEIN H L , et al. Role-based access control models[J]. Computer, 1996,29(2):38-47.
[2]	SANDHU R , BHAMIDIPATI V , MUNAWER Q . The ARBAC97 model for role-based administration of roles[J]. ACM Transactions on Information ＆ System Security, 1999,2(1):105-135.
[3]	李凤华，苏铓，史国振，等．访问控制模型研究进展及发展趋势[J]. 电子学报, 2012,40(4):805-813. LI F H , SU M , SHI G Z , et al. Research status and development trends of access control model[J]. Acta Electronica Sinica, 2012,40(4):805-813.
[4]	RANISE S , TRUONG A , ARMANDO A . Scalable and precise auto-mated analysis of administrative temporal role-based access con-trol[C]// ACM Symposium on Access Control Models and Technolo-gies. ACM, 2014:103-114.
[5]	XU D , KENT M , THOMAS L , et al. Automated model-based testing of role-based access control using predicate/transition nets[J]. IEEE Transactions on Computers, 2015,64(9):2490-2505.
[6]	STOLLER S D , YANG P , GOFMAN M I , et al. Symbolic reachability analysis for parameterized administrative role-based access con-trol[C]// ACM Symposium on Access Control Models and Technolo-gies. ACM. 2009:148-164.
[7]	UZUN E , ATLURI V , VAIDYA J , et al. Security analysis for temporal role based access control[J]. Uzun Emre, 2014,22(6):177-186.
[8]	BERTINO E , BONATTI P A , FERRARI E . TRBAC: a temporal role-based access control model[J]. ACM Transactions on Information＆ System Security, 2001,4(3):191-233.
[9]	SHARMA M , SURAL S , VAIDYA J , et al. AMTRAC: an administra-tive model for temporal role-based access control[J]. Computers ＆Security, 2013,39(39):201-218.
[10]	TOAHCHOODEE M , RAY I . On the formalization and analysis of a spatio-temporal role-based access control model[C]// IFIP Wg 11.3 Working Conference on Data and Applications Security. Springer-Verlag, 2008:399-452.
[11]	谭智勇，刘铎，司天歌，等．一种具有可信度特征的多级安全模型[J]. 电子学报, 2008,36(8):1637-1641. TAN Z Y , LIU D , SI T G , et al. A multilevel security model with credibil-ity characteristics[J]. Acta Electronica Sinica, 2008,36(8):1637-1641.
[12]	BO L , CHUNXIA J , YILIN L . A user access policy based on dynamic sensitivity label[C]// Network Computing and Information Security, International Conference on IEEE. 2011:13-16.
[13]	李凤华，王巍，马建峰，等．基于行为的访问控制模型及其行为管理[J]. 电子学报, 2008,36(10):1881-1890. LI F H , WANG W , MA J F , et al. Action-based access control model and administration of actions[J]. Acta Electronica Sinica, 2008,36(10):1881-1890.
[14]	李良军 . PLM 中权限控制的研究与设计[D]. 西安：西安电子科技大学, 2012. LI L J . Research and design of access-control in product lifecycle management (PLM)[D]. Xi'an: Xidian University, 2012.

Metrics

Recommended 0

No Suggested Reading articles found!

符号	说明
S_i	主体
O_j	客体
Ocycle	资源生命周期初始状态
op_	操作
req	访问请求
condition	访问条件
PQ_req	访问条件查询请求
action	主体行为
attr_O	客体属性
attr_H	主体访问历史
per_O	资源生命周期
policy	策略
rule	访问控制规则类型
track	用户—权限映射表
des	策略描述

模型	角色	时态	环境	资源生命周期	访问行为历史	机密性	完整性	灵活性
RBAC	Yes	No	No	No	No	No	Yes	低
ABAC	No	No	No	No	No	Yes	No	中等
L-RBAC	Yes	No	No	Yes	No	Yes	Yes	中等
文献[12]	No	No	No	No	No	Yes	No	中等
文献[13]	No	Yes	No	No	No	Yes	Part	中等
本文模型	Yes	Yes	Yes	Yes	Yes	Yes	Yes	中等

[1]	Wei JIN, Fenghua LI, Mingjie YU, Yunchuan GUO, Ziyan ZHOU, Liang FANG. HDFS-oriented cryptographic key resource control mechanism [J]. Journal on Communications, 2022, 43(9): 27-41.
[2]	Jiangtao DONG, Peiwen YAN, Ruizhong DU. Verifiable access control scheme based on unpaired CP-ABE in fog computing [J]. Journal on Communications, 2021, 42(8): 139-150.
[3]	Changgen PENG, Zongfeng PENG, Hongfa DING, Youliang TIAN, Rongfei LIU. Attribute-based revocable collaborative access control scheme [J]. Journal on Communications, 2021, 42(5): 75-86.
[4]	Zuobin YING, Yuanping SI, Jianfeng MA, Ximeng LIU. Blockchain-based distributed EHR fine-grained traceability scheme [J]. Journal on Communications, 2021, 42(5): 205-215.
[5]	Ruizhong DU, Peiwen YAN, Yan LIU. Fine-grained attribute update and outsourcing computing access control scheme in fog computing [J]. Journal on Communications, 2021, 42(3): 160-170.
[6]	Jiawei ZHANG, Jianfeng MA, Zhuo MA, Teng LI. Time-based and privacy protection revocable and traceable data sharing scheme in cloud computing [J]. Journal on Communications, 2021, 42(10): 81-94.
[7]	Tianyi ZHU,Fenghua LI,Wei JIN,Yunchuan GUO,Liang FANG,Lin CHENG. Cross-domain access control policy mapping mechanism for balancing interoperability and autonomy [J]. Journal on Communications, 2020, 41(9): 29-48.
[8]	Qinglei ZHOU,Shaohuan BAN,Yingjie HAN,Feng FENG. Mimic defense authentication method for physical access control [J]. Journal on Communications, 2020, 41(6): 80-87.
[9]	Chunfu JIA,Guanxiong HA,Ruiqi LI. Data access control policy of encrypted deduplication system [J]. Journal on Communications, 2020, 41(5): 72-83.
[10]	Yonggui FU,Jianming ZHU. Design for database access control mechanism based on blockchain [J]. Journal on Communications, 2020, 41(5): 130-140.
[11]	Zheng GUAN,Lei XIONG,Yao JIA,Min HE,Zhijun YANG. Research on scheduled WLAN MAC protocol with failure retries on RoF-DAS architecture [J]. Journal on Communications, 2020, 41(3): 102-111.
[12]	Rongna XIE,Hui LI,Guozhen SHI,Yunchuan GUO. Attribute-based lightweight reconfigurable access control policy [J]. Journal on Communications, 2020, 41(2): 112-122.
[13]	Aodi LIU, Xuehui DU, Na WANG, Rui QIAO. ABAC access control policy generation technique based on deep learning [J]. Journal on Communications, 2020, 41(12): 8-20.
[14]	Rongna XIE, Hui LI, Guozhen SHI, Yunchuan GUO, Ming ZHANG, Xiuze DONG. Blockchain-based access control mechanism for data traceability [J]. Journal on Communications, 2020, 41(12): 82-93.
[15]	Hongfa DING,Changgen PENG,Youliang TIAN,Shuwen XIANG. Privacy risk adaptive access control model via evolutionary game [J]. Journal on Communications, 2019, 40(12): 9-20.

Dynamic and adaptive access control model

RichHTML

PDF

Knowledge

Cited

Abstract

Cite this article

share this article

Figures/Tables 8

References 14

Related Articles 15

Metrics

Recommended 0