Method for controlling access to shared component of leveled partition

Abstract

The invention discloses a method for controlling the access to a shared component of a leveled partition, wherein, the method does not allow the upper / lower level relations between any two shared components in a network to be circulated; each shared component comprises one or more than one users and one or more than one partitions, the users and the partitions are assigned an integrity level, andthe documents are stored in the partitions; particularly, the integrity level is comparable numerals in sequence; and the integrity level of a document can be determined by the partition of the document, and the confidentiality level thereof can be determined by the level of the shared component in the network. The invention provides the shared component of a leveled partition for the constructionof a security model, a complex problem can be divided into a few minor problems, therefore, the problems can be solved locally, and the invention has the advantages of decentralized rights and uniform availability, confidentiality and integrity.

Description

technical field [0001] The invention relates to a method for access control of hierarchical partition sharing groups, which belongs to the technical field of security authorization and management of computer resources. Background technique [0002] Access control refers to the different authorized access of the subject to the document itself or its resources according to certain control policies or permissions. Due to the needs of network transmission, the research side of access control develops rapidly, and many access control models have been proposed. Establishing a standardized access control model is necessary to implement strict access control policies. In the 1970s, Harrison, Ruzzo and Ullman proposed the HRU model. Then, Jones et al. proposed the Take-Grant model in 1976. Subsequently, in 1985, the US military proposed TCSEC, the trusted computer system evaluation criterion, which described two well-known access control strategies: discretionary access control mo...

AI Technical Summary

Problems solved by technology

The advantages of users voluntarily granting access rights to their own documents to other users are obvious, but if the organizational structure of the enterprise or the security requirements of the system are in the process of changing, then it is necessary to carry out With a large number of tedious authorization changes, the work of the system administrator will become very heavy, and more importantly, errors are prone to occur and cause some unexpected security holes

Images