A Dynamic Multidimensional Space Access Control Method

Abstract

The invention provides a dynamic multi-dimensional space access control method. The dynamic multi-dimensional space access control method includes the following steps: Step 1, constructing a static multi-dimensional space access control model based on role access control, the static multi-dimensional space access control model is a triple <P, Dm, Dc>, wherein, P Is the collection of decision-making in access control, Dm is the multidimensional space collection that subject, object and influence factor form, Dc is the decision result of access control; Step 2, builds dynamic multidimensional space access control model based on described static multidimensional space access control model, The dynamic multi-dimensional space access control model acts on the dynamic access control strategy by adding first-order logic M on the basis of the static multi-dimensional space access control model, and is used to describe the entrustment, distribution and recovery of permissions under the dynamic access control strategy.

Description

technical field [0001] The invention belongs to the technical field of access control, and in particular relates to a dynamic multi-dimensional space access control method. Background technique [0002] In order to achieve the "separation" of policies and mechanisms in the software system, in the process of implementing the access control system, each stage will try to do the following: In the process of formulating security requirements, it must be independent of the implementation, regardless of the implementation level ; When formulating access control mechanisms based on access control policies, consider and compare multiple access control mechanisms; try to adopt access control mechanisms that can support multiple access control policies. The policy (high level) and the mechanism (low level) are connected through the access control model, so the construction of the access control model determines the relationship between the policy and the mechanism. Whether it is the ...

AI Technical Summary

Problems solved by technology

[0010] 2. Insufficient description ability of traditional RBAC model

[0012] In software implementation, the function codes of this part of the context are often distributed outside the access control point (access control point) of the program, which destroys the reliability, maintainability and integrity of the access control program, and brings A great hidden danger to security, placing the access control implementation outside the access control point brings opportunities for malicious users to tamper with the program

Images