一种基于可信等级的安全互操作模型

传统的访问控制方式已不能满足多域环境下的资源共享和跨域访问的安全需求,建立安全互操作模型是进行安全互操作的有效途径。针对现有域间安全互操作模型未考虑用户平台的问题,提出了一种基于可信等级的域间安全互操作(TLRBAC)模型。该模型引入了用户可信等级、平台可信等级和域可信等级,制定了域间安全互操作方法。分析表明该模型既保证了用户的可信接入,又能有效地控制因平台环境而引起的安全风险问题。

Trust level based secure interoperation model

Traditional access control methods can not meet the security demand of the resource sharing and cross-domain access anymore, establishing secure interoperation model is an effective way to secure interoperation. For the neglect of the security risks caused by the user platform in the existing inter-domain interoperation security model, this paper proposed a trust level of role-based access control(TLRBAC) model. It introduced user trust level, platform trust level and domain trust level, then constituted the method of inter-domain interoperation in the model. Analysis shows that the model can not only ensure the credibility of user's access, but also effectively control the problem of security risks caused by environment of the platform.