面向电子文档的协作式访问控制模型

在各种攻击日益严重的情况下,电子文档保护技术越来越重要.提出了一种协作式的访问控制模型,在该模型中保留了用户自主访问控制能力,同时利用强制访问控制将用户的自主能力限制在安全级别允许的范围.从生成、分发、读、写、复制/粘贴、打印6种操作角度全面控制泄露途径,可以防御针对电子文档的内部泄露,特洛伊木马和间接泄露等安全威胁.利用提出的模型和方法,在 Window 环境下实现了对 Word 文档的保护.

Coordinate access control model for electronic documents

As network attacks becoming more and more, the technology in protecting electronic documents has developed. A coordinate access control model is given which preserves the discretionary access control ability, and the discretionary ability under security level rules is limited. The model defines six operation rules including creating, distributing, reading, writing, copying/pasting and printing to control the ways of information compromise caused by inside spy, Trojan and indirect leakage. With the model and the method, the protection on Word format documents is implemented in Windows environment.