环境感知的细粒度访问控制模型.pdfVIP

通 信 学 报 Journal on Communications 环境感知的细粒度访问控制模型 刘宏月，马建峰 （西安电子科技大学计算机网络与信息安全(教育部)重点实验室，陕西 西安 710071 ） 摘 要：普适计算环境中的应用系统具有广泛的动态性，用户需求存在显著的差异，需要从环境上下文着手实施 动态差异化的细粒度资源访问控制。为此，文中研究了资源访问的上下文环境因素在访问控制决策中的影响和作 用，提出一种环境感知的细粒度访问控制策略和方法。论文先对环境因素分类分析，从平台环境、用户环境、空 间环境和时间环境4 个层面对环境因素进行描述；然后引入环境上下文约束重构访问控制系统的实体和关系，对 访问控制系统的基本构件进行形式化描述，实现动态细粒度的资源访问控制；最后通过一个应用案例来展示基于 环境约束的细粒度访问控制策略描述和规则设计。 关键字：访问控制；角色；环境感知；上下文约束 中图分类号：TP309.2 文献标识码： 文章编号： Environment-aware fine-grained access control model LIU Hong-yue, MA Jian-feng (Key Laboratory of Computer Networks and Information Security of Ministry of Education, Xidian University, Xi ’an, Shaanxi 710071, China) Abstract: As the applications built in pervasive computing environment represent comprehensive dynamics, the user re- quirements in them are significant difference, they require dynamic differentiated fine-grained resource access control taking environment context into consideration. With regards to this, the paper investigates the impact and functions of environment factors in access control policy decision, and proposes an environment-aware fine-grained access control policy and method. Firstly, the environment factors in access control context is analyzed classifiedly and described for- mally from four dimensions including platform security environment, user trust environment, space environment and time environment; Then, the entities and relations in role based access control model are reconstructed and formalization using environment context constraints to achieve dynamic fine-grained resource access control; Final