【摘要】：針對基于角色的訪問控制模型在云計(jì)算跨域訪問方面安全性不足的問題,在基于角色映射技術(shù)的基礎(chǔ)上引入網(wǎng)絡(luò)中跳數(shù)的定義,提出一種基于跳數(shù)的訪問控制策略以解決在角色映射過程中所產(chǎn)生的權(quán)限滲透問題.從訪問過程和形式化定義兩方面對該策略進(jìn)行了研究,并進(jìn)行了仿真性能實(shí)驗(yàn).與其他策略進(jìn)行了比較,該策略通過在角色集和用戶集中添加相應(yīng)的字段來實(shí)現(xiàn)對跨域訪問距離的細(xì)粒度控制,因此并未產(chǎn)生新的集合,進(jìn)行跨域訪問時(shí)也無須建立任何的鏡像角色.實(shí)驗(yàn)結(jié)果表明該策略與傳統(tǒng)跨域訪問策略相比具有更高的效率以及更低的存儲消耗.
[Abstract]:Aiming at the lack of security of role-based access control model in cloud computing cross-domain access, the definition of hops in network is introduced on the basis of role-based mapping technology. An access control strategy based on number of hops is proposed to solve the problem of privilege penetration in the process of role mapping. The strategy is studied from the aspects of access procedure and formal definition, and the simulation performance experiment is carried out. Compared with other policies, the policy implements fine-grained control over cross-domain access distances by adding appropriate fields to the role set and user set, so it does not produce a new collection. There is also no need to create any mirroring roles for cross-domain access. Experimental results show that the proposed strategy has higher efficiency and lower storage consumption than the traditional cross-domain access strategy.
【作者單位】： 山東師范大學(xué)信息科學(xué)與工程學(xué)院;山東師范大學(xué)分布式計(jì)算機(jī)軟件新技術(shù)重點(diǎn)實(shí)驗(yàn)室;
【基金】：山東省自然科學(xué)基金資助項(xiàng)目(ZR2011FM019) 山東省研究生教育創(chuàng)新計(jì)劃資助項(xiàng)目(SDYY11117)
【分類號】：TP393.08

【相似文獻(xiàn)】

相關(guān)期刊論文 前10條

1 樊銀亭;王春清;周德祥;;一種ERBAC模型的設(shè)計(jì)與實(shí)現(xiàn)[J];合肥工業(yè)大學(xué)學(xué)報(bào)(自然科學(xué)版);2007年07期

2 孫國棟;代新;李九靈;趙大興;;基于角色與監(jiān)控組件可配置的訪問控制[J];湖北工業(yè)大學(xué)學(xué)報(bào);2010年04期

3 李岳t，

本文編號：2184376