基于Portal认证技术的科技成果数据跨平台访问控制

为避免科技成果数据外泄，设计一种基于Portal认证技术的科技成果数据跨平台访问控制方法。采用Portal认证技术构建请求访问平台和科技成果数据服务平台的访问控制模型，当这2个平台通过访客身份认证后，对其进行信任度评估和访问请求授权；服务提供平台利用策略实施点（PEP）完成访问请求用户属性信息的收集并传送至PEP，采用推荐算子计算存在访问请求的用户信任度，并通过合一运算获取用户在科技成果数据服务平台的信任度。将获取的信任度传送至策略决策点（PDP），通过PDP对信任度进行分析，以给出是否对该访问请求进行授权的判定，实现科技成果数据跨平台访问控制。实验结果表明，该方法访问控制的有效性与精准度较高，平台响应时间短，实用性好。

Cross Platform Access Control of Technology Achievement Data Based on Portal Authentication Technology

In order to avoid the leakage of scientific and technological achievements data, a cross platform access control method based on Portal authentication technology is designed. Portal authentication technology is used to construct the access control model of request access platform and scientific and technological achievements data service platform. When these two platforms pass the visitor identity authentication, the trust degree evaluation and access request authorization are carried out. The service provider platform uses the policy enforcement point (PEP) to complete the collection of user attribute information of the access request and transmit it to the PEP, and uses the recommendation operator to calculate the existing access ask the user’s trust degree, and obtain the user’s trust in the scientific and technological achievements data service platform through the integration operation. The obtained trust degree is transmitted to the policy decision point (PDP). The trust degree is analyzed by the PDP to determine whether the access request is authorized or not, so as to realize the cross platform access control of scientific and technological achievements data. The experimental results show that the method has high efficiency and accuracy, short platform response time and good practicability.