Strategy and method for realizing minimum privilege control in safety operating system

Abstract

A method for realizing minimum privilege control in safety operation system includes providing layer mapping relation between user, role, DTE domain, power and function for said system; revising and adding core function relating to privilege, system interface, power and function management, power and function decision as well as power and function operation at operation system; providing power and function management command for application layer and revising initial session program of said system.

Description

technical field [0001] The invention relates to the technical field of digital computer safety information system, more precisely, it relates to a strategy and method for realizing least privilege control in a safety operating system. Background technique [0002] Least privilege is an important design principle of information system security, and it is also to ensure that the security system reaches the level above B2 of the US "Trusted Computer System Evaluation Standard" (DoD5200.28-STD-1985), and the international standard "IT Security Evaluation Standard" (ISO / IEC15408-1999) EAL5 level or above, the Chinese national standard "Computer Information System Security Protection Classification Criteria" (GB17859-1999) level 4 or above, the Chinese national standard "Information Technology Security Technology Information Technology Security Evaluation Criteria" (GB / T18336-2001) A key issue that must be solved for EAL5 and above. [0003] Due to traditional reasons, there is...

AI Technical Summary

Problems solved by technology

[0005] The method based on user / user group identification is to create a specific user / user group and make a specific program run with the identity and authority of a specific user / user group, such as the setuid mechanism in the LINUX system. Its advantage is that the implementation technology is very Simple, the disadvantage is: it is easy to cause superusers (specific users with all permissions) to do anything, and most of the current security systems no longer use it as the main technology, only for providing compatibility or maintaining the system.

Although this method simplifies authorization management, ensures the isolation of duties and the minimization of user privileges, it has two shortcomings: (1) It is only a static, user-level granular control

The disadvantages are: (1) Least privilege control must be implemented for each program to complicate privilege management; (2) Appropriate privilege assignment must be performed for each program, otherwise the risk of the system will increase accordingly

[0008] Although these three methods or a combination of methods can make up for some shortcomings of traditional privilege control methods to a certain extent, such as the isolation of responsibilities and the granularity of fine-grained control, they cannot solve the domain isolation and dynamic requirements of privilege control.

Images