«上一篇/Previous Article|本期目录/Table of Contents|下一篇/Next Article»

《计算机技术与发展》[ISSN:1006-6977/CN:61-1281/TN]

卷:

32

期数:

2022年04期

页码:

92-96

栏目:

网络与安全

出版日期:

2022-04-10

文章信息/Info

Title:

Research on Dynamic Access Control Model for Access Process

文章编号:

1673-629X(2022)04-0092-05

作者:

胡文瑜¹; 2 ; 陈金波¹; 2*

1. 福建工程学院 计算机科学与数学学院,福建 福州 350118;

2. 福建省大数据挖掘与应用技术重点实验室,福建 福州 350118

Author(s):

HU Wen-yu1; 2 ; CHEN Jin-bo1; 2*

1. School of Computer Science and Mathematics,Fujian University of Technology,Fuzhou 350118,China;

2. Fujian Provincial Key Laboratory of Big Data Mining and Applications,Fuzhou 350118,China

关键词:

访问控制; 动态权限; 行为评估; 基于角色访问控制模型; 模糊推理

Keywords:

access control; dynamic permissions; behavior assessment; role-based access control model; fuzzy inference

分类号:

TP309

DOI:

10. 3969 / j. issn. 1673-629X. 2022. 04. 016

摘要:

信息安全领域中的访问控制技术为信息安全增加了一道坚固的屏障,但现有的访问控制技术更注重在用户取得授权之前对用户进行合法性校验和信任度评估,合法用户一经授权便在整个访问周期里都拥有完整权限,合法用户拿到权限后即使进行非法操作也无法对其权限进行收回。 该文提出了一种面向访问过程的动态访问控制( access process oriented dynamic access control,APODAC) 模型,该模型在原有基于角色控制模型( RBAC 模型) 的基础上引入用户风险等级评估、权限动态调整等一系列方法,实现了用户基于角色取得最大权限的情况下对用户权限进行实时监控与调整。 最后给出了 APODAC 模型的体系架构,同时还给出了用户行为序列的构建策略、用户风险等级模糊推理器架构以及动态授权算法。 APODAC 模型实现了访问过程的权限动态控制,为动态权限访问控制提供了新思路。

Abstract:

The access control technology in the field of information security adds a solid barrier for information security,but the existing access control technology pays more attention to the legitimacy verification and trust evaluation of users before they are authorized. Once authorized,legitimate users have full permissions in the whole access cycle. Even if they do illegal operations,their permissions cannot be withdrawn. We propose an access process oriented dynamic access control model ( APODAC model ) . This model introduces user behavior evaluation parameters on the basis of the original role - based control model ( RBAC model ) , and realizes the real - time monitoring and adjustment of user permissions when the user obtains the maximum permissions based on the role. Finally,the architecture of APODAC model is given,and the construction strategy of user behavior sequence,the architecture of user risk level fuzzy inference and dynamic authorization algorithm are also given. APODAC model implements dynamic access control, which provides a new idea for dynamic access control.

常用功能

更新日期/Last Update: 2022-04-10