Access control method for airborne embedded operating system

Abstract

According to the access control method for the airborne embedded operating system, a simple traditional security level authentication method is set for system common resources with low security risks, a security value authentication method is set for file / database access with high security risks, and a security value is obtained based on a pre-trained neural network model. Compared with the prior art, the method has higher adaptability and flexibility, adopts a dynamic trust value authentication method for partition access, can consider the security of historical access behaviors, and realizes the dynamic adjustment of trust values.

Description

Technical Field

[0001] The present invention relates to the field of access control security technology, and in particular to an access control method for an airborne embedded operating system. Background Art

[0002] In the aviation field, the degree of electronicization of airborne systems continues to increase, the proportion of software systems is increasing, and the security and reliability of software systems are constantly receiving attention. Therefore, in addition to providing a multi-security level isolation environment for mission operation, the airborne embedded operating system also needs to provide a secure access control mechanism to ensure the secure interaction of objects of different security levels.

[0003] Once the access rules of traditional access control methods are generated, they are often immutable, lacking adaptability and flexibility, and are difficult to identify cunning and changing threats and risks. Traditional access control is a one-time authentication and long-term effective form, lacking consideration of the visitor's historical credit, and unable to identify malicious objects that have been disguised for a long time. Summary of the invention

[0004] The purpose of the technical solution of the present invention is to set a variety of access control rules for different types of objects to solve the problem that malicious objects that have been disguised for a long time cannot be identified due to the lack of consideration of the visitor's historical credit.

[0005] The technical solution of the present invention provides an access control method for an airborne embedded operating system, comprising the following steps:

[0006] The partition application in the onboard operating system submits an access request to access different resources, and determines whether the resource corresponding to the access request is a common resource component;

[0007] If it is a common resource component, the confidentiality authentication between different resources and partitioned applications is performed and the confidentiality access result is obtained;

[0008] If it is not a common resource component, continue to determine whether it is a file / database. If it is a file / database, obtain the file / database attribute vectors of the partition application and different resources, calculate the access security value corresponding to the attribute vector according to the access security value formula, compare the access security value with the access threshold and obtain the security value access result to achieve security value authentication;

[0009] If it is not a file / database, continue to determine whether it is inter-partition communication. If it is inter-partition communication, obtain the inter-partition communication attribute vector of the partition application and different resources, calculate the mutual trust value corresponding to the attribute vector according to the mutual trust value formula, select N communication records containing this inter-partition communication, calculate the historical mutual trust accumulation of this inter-partition communication according to the historical mutual trust accumulation formula, count the total number of visits, the number of positive evaluations, and the number of negative evaluations in the past θ time period, calculate the penalty / reward factor corresponding to this communication according to the penalty / reward factor formula, obtain the total trust value of this communication according to the historical mutual trust accumulation, penalty / reward factor and positive evaluation number of this inter-partition communication, compare the total trust value of this communication with the trust threshold and obtain the dynamic trust value authentication result to achieve security value authentication;

[0010] If it is not inter-partition communication, confidentiality authentication is performed between different resources and partition applications and confidentiality access results are obtained.

[0011] Preferably, the file / database attribute vector includes: access levels of the partition application and different resources, access groups, and the read, write, and execute permissions of the partition application to the file / database.

[0012] Preferably, the inter-partition communication attribute vector includes: communication security levels of partition applications and different resources, communication groups, communication data entropy values ​​and communication data categories.

[0013] Preferably, the historical mutual trust accumulation formula is as follows:

[0014]

[0015] Among them, Δt j =t i -t j It is the accumulated time from the jth (iN≤j≤i-1)th communication to the present one, e is the entropy value of the communication data, and i is the communication between partitions this time.

[0016] Preferably, the penalty / reward factor is as follows:

[0017]

[0018] Among them, pi is the number of positive comments, Mi is the total number of visits, and ni is the number of negative comments.

[0019] The technical solution of the present invention proposes an access control method for an airborne embedded operating system, which sets a simple traditional confidentiality authentication method for common system resources with low security risks, and sets a security value authentication method for file / database access with high security risks. The security value is obtained based on a pre-trained neural network model, which has stronger adaptability and flexibility. For partition access, a dynamic trust value authentication method is adopted, which can take the security of historical access behaviors into consideration and realize dynamic adjustment of the trust value. BRIEF DESCRIPTION OF THE DRAWINGS

[0020] Figure 1 An onboard operating system access control flow chart in an onboard embedded operating system access control method provided by an embodiment of the present invention;

[0021] Figure 2 A flow chart of confidentiality authentication in an access control method for an onboard embedded operating system provided by an embodiment of the present invention;

[0022] Figure 3 A security value authentication flow chart in an access control method for an onboard embedded operating system provided by an embodiment of the present invention;

[0023] Figure 4 A dynamic trust value authentication flow chart in an access control method for an airborne embedded operating system provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0024] The present invention will be further described below in conjunction with specific embodiments. It should be understood that these embodiments are only used to illustrate the present invention and are not intended to limit the scope of the present invention. In addition, it should be understood that after reading the content taught by the present invention, those skilled in the art can make various changes or modifications to the present invention, and these equivalent forms fall within the scope limited by the appended claims of the application equally.

[0025] The embodiment of the present invention provides an access control method for an onboard embedded operating system, which is used to solve the security problem caused by partitioned applications accessing different resources in the onboard operating system, and includes the following steps:

[0026] like Figure 1 As shown, for access control of the onboard operating system, the steps are as follows:

[0027] Step 101: Start.

[0028] Step 102: The partition application submits an access request.

[0029] Step 103: Determine whether the interviewee is a common resource component, if so, jump to step 106, otherwise jump to step 104.

[0030] Step 104: Determine whether the respondent is a file / database, if so, jump to step 107, otherwise jump to step 105.

[0031] Step 105: Determine whether the interviewee is a partition (inter-partition communication), if so, jump to step 108, otherwise jump to step 106.

[0032] Step 106: Authentication based on confidentiality level, then jump to step 110.

[0033] like Figure 2 As shown, the confidentiality authentication includes the following steps:

[0034] Step 201: Start.

[0035] Step 202: Obtain the confidentiality level of the interviewee and the visitor.

[0036] Step 203: Compare the confidentiality levels of the interviewee and the visitor. If the confidentiality level of the interviewee is equal to or lower than that of the visitor, jump to step 204; otherwise, jump to step 205.

[0037] Step 204: Allow this access, and then jump to step 206.

[0038] Step 205: Deny this access.

[0039] Step 206: End.

[0040] Step 107: Authentication based on the security value, then jump to step 110.

[0041] like Figure 3 As shown, security value authentication includes the following steps:

[0042] Step 301: Start.

[0043] Step 302: Generate attribute vectors A = [L, G, R, W, E, G', L'] for both parties, where L and L' are the confidentiality levels of both parties, G and G' are the groups of both parties, and R, W and E are the read, write and execute permissions of the visitor to the file / database.

[0044] Step 303: Calculate the access security value O=f1(A), where f1 is a pre-trained seven-input and ten-output three-layer neural network model.

[0045] Step 304: Compare the safety value O with the threshold Othreshold. If O is greater than or equal to Othreshold, jump to step 305; otherwise, jump to step 306.

[0046] Step 305: Allow this access, and then jump to step 307.

[0047] Step 306: Deny this access.

[0048] Step 307: End.

[0049] Step 108: Authentication based on the dynamic trust value, then jump to step 110.

[0050] like Figure 4 As shown, dynamic trust value authentication includes the following steps:

[0051] Step 401: Start.

[0052] Step 402: Generate the attribute vector A of both parties in this (i-th) communication i =[L,L',G,G',e,C], where L and L' are the confidentiality levels of the two communicating parties, G and G' are the groups of the two communicating parties, e is the entropy value of the communication data, and C is the category of the communication data.

[0053] Step 403: Calculate the mutual trust value P between the two parties in this communication i =f2(A i ), where f2 is a pre-trained three-layer neural network model with six inputs and ten outputs.

[0054] Step 404: Select N communication records from the past iN to i-1 times, and calculate the accumulated mutual trust in this communication history Where Δt j =t i -t j It is the cumulative time from the jth (iN≤j≤i-1)th communication to the present one.

[0055] Step 405: Count the past θ time period [t i -θ,t i ]Total number of visits Mi, number of positive reviews pi, number of negative reviews ni, calculate the penalty / reward factor for this time

[0056] Step 406: Calculate the total trust value S i =ωT i +(1-ω)r i P i .

[0057] Step 407: Record the current timestamp ti and the historical mutual trust accumulation Ti.

[0058] Step 408: Compare the total trust value S with the threshold Sthreshold. If S is greater than or equal to Sthreshold, jump to step 409; otherwise, jump to step 410.

[0059] Step 409: Allow this access, and then jump to step 411.

[0060] Step 410: Deny this access.

[0061] Step 411: End.

[0062] Step 109: Access is denied and an exception is thrown.

[0063] Step 110: Record audit information.

[0064] Step 111: End.

Claims

1. An access control method for an onboard embedded operating system, characterized in that: The following steps are involved: The partition application in the onboard operating system submits an access request to access different resources, and determines whether the resource corresponding to the access request is a common resource component; If it is a common resource component, the confidentiality authentication between different resources and partitioned applications is performed and the confidentiality access result is obtained; If it is not a common resource component, continue to determine whether it is a file / database. If it is a file / database, obtain the file / database attribute vectors of the partition application and different resources, calculate the access security value corresponding to the attribute vector according to the access security value formula, compare the access security value with the access threshold and obtain the security value access result to achieve security value authentication; If it is not a file / database, continue to determine whether it is inter-partition communication. If it is inter-partition communication, obtain the inter-partition communication attribute vector of the partition application and different resources, calculate the mutual trust value corresponding to the attribute vector according to the mutual trust value formula, select N communication records containing this inter-partition communication, calculate the historical mutual trust accumulation of this inter-partition communication according to the historical mutual trust accumulation formula, count the total number of visits, the number of positive evaluations, and the number of negative evaluations in the past θ time period, calculate the penalty / reward factor corresponding to this communication according to the penalty / reward factor formula, obtain the total trust value of this communication according to the historical mutual trust accumulation, penalty / reward factor and positive evaluation number of this inter-partition communication, compare the total trust value of this communication with the trust threshold and obtain the dynamic trust value authentication result to achieve security value authentication; If it is not inter-partition communication, confidentiality authentication is performed between different resources and partition applications and confidentiality access results are obtained.

2. The access control method for an onboard embedded operating system according to claim 1, characterized in that: The file / database attribute vector includes: the access level of the partition application and different resources, the access group, and the read, write, and execute permissions of the partition application on the file / database.

3. The access control method for an onboard embedded operating system according to claim 1, characterized in that: The inter-partition communication attribute vector includes: communication confidentiality levels of partition applications and different resources, communication groups, communication data entropy values, and communication data categories.

4. The access control method for an onboard embedded operating system according to claim 1, characterized in that: The historical mutual trust accumulation formula is as follows: Among them, Δt j =t i -t j It is the accumulated time from the jth (iN≤j≤i-1)th communication to the present one, e is the entropy value of the communication data, and i is the communication between partitions this time.

5. The access control method for an onboard embedded operating system according to claim 1, characterized in that: The penalty / reward factors are as follows: Among them, pi is the number of positive comments, Mi is the total number of visits, and ni is the number of negative comments.

Images