面向多级互联系统的安全信任模型

多级互联系统由不同安全等级的信息系统组成,资源和用户的安全标记是实施强制访问控制的基础.由于低等级信息系统的可信级别较低,给高等级信息系统带来身份和权限欺诈等信任风险.提出了一个多级身份信任模型,在对多级互联系统进行安全建模的基础上,构建多级信任安全性公理和信任规则,对跨级跨系统信息系统的身份认证行为进行规范,避免了上述安全风险,有效地解决了多级互联系统中的跨级信任问题.

Identity Trust Model for Multi Class Information System

In multi-class information system （multi-class IS） constituted by information systems of different security levels, the resources and users＇ security labels are the foundation of MAC. Since the credibility of lower-class system is lower than that of high-class, there will be such risks as iden-tity and authorization cheating. This article proposes a multi-class identity trust model, which de-signs security axioms and security rules by modeling multi-class IS. By specifying identity authenti-cation of multi-class IS, this model avoids risk of identity cheat and solves the problem of identity trust in muhi-class IS.