| 支持动态授权和文件评价的访问控制机制 |
| |
| 引用本文： | 张悦,郑东,张应辉.支持动态授权和文件评价的访问控制机制[J].计算机应用,2015,35(4):964-967. |
| |
| 作者姓名： | 张悦 郑东 张应辉 |
| |
| 作者单位： | 1. 无线网络安全技术国家工程实验室(西安邮电大学), 西安 710121;
2. 信息安全国家重点实验室(中国科学院信息工程研究所), 北京 100093 |
| |
| 基金项目： | 国家自然科学基金资助项目，陕西省自然科学基础研究计划项目，国家科技重大专项基金资助项目 |
| |
| 摘 要： | 针对传统的访问控制方法不支持动态授权和文件评价、且存在恶意再分享隐患,设计了一种支持动态授权和文件评价的访问控制机制(DAFE-AC)。DAFE-AC采用的动态授权机制能够对已授权用户进行实时监控,保证了用户之间的相互监督;采用的文件评价机制可以支持文件解锁阈值的动态更新。基于Hash/索引数据库,DAFE-AC确保了文件在系统中的唯一性。在DAFE-AC中,用户授权值会随着其他用户行为动态变化,且用户可以通过对文件进行评价以消除恶意再分享。
|
| 关 键 词： | 访问控制 文件共享 动态授权 文件评价 |
| 收稿时间： | 2014-10-31 |
| 修稿时间： | 2014-12-23 |
Access control mechanism with dynamic authorization and file evaluation |
| |
| ZHANG Yue,ZHENG Dong,ZHANG Yinghui.Access control mechanism with dynamic authorization and file evaluation[J].journal of Computer Applications,2015,35(4):964-967. |
| |
| Authors: | ZHANG Yue ZHENG Dong ZHANG Yinghui |
| |
| Affiliation: | 1. National Engineering Laboratory for Wireless Security (Xi'an University of Posts and Telecommunications), Xi'an Shaanxi 710121, China;
2. State Key Laboratory of Information Security (Institute of Information Engineering, Chinese Academy of Sciences), Beijing 100093, China |
| |
| Abstract: | Concering that the traditional access control methods fail to support dynamic authorization and file evaluation, and suffer from malicious re-sharing issue, an Access Control Mechanism with Dynamic Authorization and File Evaluation (DAFE-AC) was proposed. DAFE-AC adopted a dynamic authorization mechanism to monitor authorized users in real-time and allowed users to supervise each other. The file evaluation mechanism in DAFE-AC could dynamically update the access threshold of files. Based on the Hash/index database, DAFE-AC can ensure the uniqueness of files in the system. In DAFE-AC, a user' authorization value can dynamically change with behaviors of other users, and users can perform file evaluation to eliminate malicious re-sharing of files. |
| |
| Keywords: | access control file sharing dynamic authorization file evaluation |
| 本文献已被 万方数据 等数据库收录！ |
| 点击此处可从《计算机应用》浏览原始摘要信息 |
|
点击此处可从《计算机应用》下载全文 |
|
