Method and system for achieving fast circulation of structural file among multiple levels of safety domains

Abstract

The invention relates to a method and system for achieving fast circulation of a structural file among multiple levels of safety domains. According to the method and system, an access control module is set for the structural file, so that under coordination of a cross-domain coordinated management center, access of the structural file among the multiple levels of safety domains is operated not specific to the whole structural file, but specific to the access control module of the file, and a circulation process is not specific to the whole structural file, but a copy of a file portion on which a user has the access authority is generated by a file copy generator. Confidentiality of the whole file is ensured, completeness of the files is not damaged in the verification process, and the whole process is fast in synergy and clear. In addition, the problems of logical structure description, style structure description and resource data completeness and confidentiality in the network cross-domain circulation process of the structural file can be effectively solved, and the structural file can be reasonably, legally and safely used.

Description

technical field [0001] The invention relates to the technical field of communication and network security, in particular to a method and a system for realizing fast transfer of structured documents between multi-level security domains. Background technique [0002] With the advancement of technology such as network and digital publishing, the access requirements for documents between multi-level security domains have developed rapidly, and structured documents integrate streaming and format description information, oriented to diverse reading and display requirements, and are widely used in Interactive communication in the network environment has gradually become an important carrier of Internet information dissemination. At the same time, since documents contain sub-documents and sub-documents contain objects, access control must be based on objects, so how to ensure the confidentiality of subjects accessing objects in documents, improve the security of management policies,...

AI Technical Summary

Problems solved by technology

[0004] There is a risk of unsafe access: each access control is to target the entire document, and each access may allow the user (subject) to obtain some chapters and sections of the document with a high level of confidentiality without authorization. Information

[0005] Poor cross-domain collaboration ability: When confirming the content of the document that the subject can access, it must be from the outside to the inside, from the document entry to sub-document 1, sub-document 2, ..., sub-document N, and even sub-documents under the sub-document (or object), resource access to each part must go through a series of verifications (including entity authentication, platform authentication, integrity verification, etc.)

Images