基于应用区域边界体系结构的多主体访问控制安全模型

为解决应用区域边界安全体系结构中的多主体访问控制安全问题,分析了应用区域边界的安全体系结构,利用BLP模型、Biba模型和RBAC模型的基本性质,针对该类安全体系结构的数据读/写操作和数据传送问题,详细定义并描述了创建客体规则、创建主体规则和数据传送中发送/接收规则.形式化证明了给出的描述规则是合理的、安全的,由这些规则组成的基于应用区域边界的安全体系结构模型是安全的.

A Security Model of Multi-users Access Control Based on the Architectureof Application Area Boundary

In order to promote the security of multi-users access, the properties of the BLP model, Biba model and RBAC model were given, and the problems of data write/read operation and data transmission in the security architecture of application area boundary were described. To solve the problems, the rules of creating objects, creating subjects and sending/receiving data in transmission were presented, and the rationality and security of the rules were proved formally. It was showed that the security architecture model of application area boundary, which was made of the rules is security.