Dynamic multidimensional space access control method

Abstract

The invention provides a dynamic multi-dimensional space access control method. The dynamic multi-dimensional space access control method comprises the following steps: 1, constructing a static multi-dimensional space access control model based on role access control, wherein that static multi-dimensional space access control model is a three-tuple< P, Dm, Dc>;, wherein P is a set of decision in access control, Dm is a multi-dimensional space set of subject, object and influence factors, and Dc is a result of access control decision; 2, constructing a dynamic multi-dimensional space access control model based on that static multi-dimensional space access control model, The dynamic multi-dimensional space access control model is used to describe the delegation, distribution and reclamationof rights under the dynamic access control policy by adding a first-order logic M to the static multi-dimensional space access control model and acting on the dynamic access control policy.

Description

technical field [0001] The invention belongs to the technical field of access control, and in particular relates to a dynamic multi-dimensional space access control method. Background technique [0002] In order to achieve the "separation" of policies and mechanisms in the software system, in the process of implementing the access control system, each stage will try to do the following: In the process of formulating security requirements, it must be independent of the implementation, regardless of the implementation level ; When formulating access control mechanisms based on access control policies, consider and compare multiple access control mechanisms; try to adopt access control mechanisms that can support multiple access control policies. The policy (high level) and the mechanism (low level) are connected through the access control model, so the construction of the access control model determines the relationship between the policy and the mechanism. Whether it is the ...

AI Technical Summary

Problems solved by technology

[0010] 2. Insufficient description ability of traditional RBAC model

[0012] In software implementation, the function codes of this part of the context are often distributed outside the access control point (access control point) of the program, which destroys the reliability, maintainability and integrity of the access control program, and brings A great hidden danger to security, placing the access control implementation outside the access control point brings opportunities for malicious users to tamper with the program

Images