基于可信度的访问控制模型的设计与分析

针对CAS授权模型的局限性，提出了一种基于认证可信度的访问控制模型。在CAS授权模型中，虚拟组织中的成员通过向服务器添加访问策略达到访问控制的目的。在开放式环境下，由于节点频繁加入或退出，导致服务器开销增大。在基于可信度的访问控制模型中，资源提供方通过向服务器注册信任阎值和信任权重代替访问控制策略，达到控制用户访问的目的。模型既运用了认证机制，同时还考虑到用户的信任度，因而模型具有灵活性和可靠性两个特点。

Design and Analysis of an Access Control Model Based on Credibility

An access control model based on credibility is proposed.Threshold value of credibility and a weight factor are applied in the model,and use Analytic Hierarchy Process（AHP） to analyze the weight of every rule.Providers adjust the threshold value and weight factor instead of changing policies in the server.First the server authenticates the requestor and gives him credibility,then synthesizes the credibility and trustworthiness.If the synthesis of credibility achieves the threshold value,the server gives him.a certificate. The authentication policies and trustworthiness are both used in the model, thus flexibility and robustness are the advantages of this model.