A method of inter-domain access control based on dynamic self-regulation

Abstract

The invention relates to an inter-domain access control method based on dynamic self regulation. The problems of too rough access control granularity, difficulty in change of mapping relation, lack of evolution semantic and the like in the current inter-domain interoperation scene are solved. In order to solve the problems of too rough access control granularity, difficulty in change of mapping relation, lack of evolution semantic and the like in most inter-domain interoperation policy integrating schemes, a DRG (Directional Role Diagram) is created to model RBAC (Role-Based policies Access Control), evolution semantic between nodes is established by using an attribute constrain space, a mapping rule regulating mechanism is realized through related threshold estimation of constrain satisfactory factors, safety estimation factors and the like, and a complete evaluation implementation scheme is presented. By the scheme, 'an initial domain role identifier acquired through a management way' and 'a collaboration domain role identifier acquired through a mapping way' are differentiated clearly, so that the traditional security constraint of attribute level violation on a mapping rule is broken through.

Description

technical field [0001] The invention belongs to the field of cross-domain authorization access control of information security, and in particular relates to a dynamic self-adjustment-based inter-domain access control method. Background technique [0002] With the development of cloud computing and new generation network technology and the requirements of information security, various departments, industries, and regions have established their own access control systems in their own domains, and enterprises and institutions in different domains have emerged. With more and more business transactions, cross-domain secure access has become an inevitable requirement for large-scale distributed environments, especially multi-domain environments for new-generation network technologies. After cross-domain authentication solves the problem of identity authentication, the next problem to be solved is the distribution of user access rights in different domains, that is, the problem of ...

AI Technical Summary

Problems solved by technology

Solve the problems in the current interoperability scenarios, such as the granularity of permission control is too coarse, the mapping relationship is not easy to change, and the lack of evolutionary semantics

[0010] Aiming at the problems of too coarse granularity of authority control, hard to change mapping relationship and lack of evolution semantics in most current inter-domain interoperability policy integration schemes, the present invention creates a directed role graph DRG to model RBAC (RoleBasedAccessControl), and utilizes attributes The constraint space constructs the evolution semantics between nodes, implements the mapping rule adjustment mechanism through the threshold evaluation related to the constraint satisfaction coefficient and safety evaluation coefficient, and provides a complete implementation plan of a request-driven dynamic self-adjusting inter-domain mapping rule evolution model

Images