一种多级跨域访问控制管理模型

访问控制管理为维护访问控制策略的安全、一致提供了重要保障。针对现有访问控制管理模型存在指派关系复杂、扩展性差、缺乏对跨域访问管理有效支撑的问题，结合多级跨域系统特性和访问控制管理的细粒度要求，文章提出了多级跨域访问控制管理模型，给出了模型的基本元素、元素关系、约束条件和管理规则。与现有研究相比，该模型具有良好的可扩展性，支持细粒度的管理操作，能够有效支撑多级跨域环境下安全、统一的访问控制管理。

A Multi-Level ＆amp; Inter-Domain Access Control Administrative Model

The technologies of access control administration provide security and consistency to access control policies. Aiming at the problems of complex assignment, scalability and lacking of effective support for cross-domain access management of exsisting models, this paper proposes a multi-level＆amp;inter-domain access control administrative model （ML-IDACAM） by combining the characteristics of multi-level＆amp;inter-domain system and the ifne-grained need of access control administration, bringing forward the model’s basic elements, element relationships, constraints and administration rules. Compared with related works, the ML-IDACAM model which has good expansibility and ifne-grained operation can support secure and centralized access control administration.