基于信任的企业信息系统访问控制研究

随着企业规模的不断扩大及信息化水平的不断提高,越来越多的企业采用信息系统提升其竞争力。针对企业信息系统不能对访问用户进行动态授权的问题,文中提出了一种基于信任的企业信息系统访问控制机制,根据用户行为对用户信任度进行评估,参照用户信任度对用户进行动态授权,对访问企业信息系统的用户权限进行动态控制,提高了企业信息系统的安全性。

Study on Trust-based Access Control of Enterprise Information System

With enlargement of the enterprise＇s size and improvement of the informatzation level, more and more enterprises adopt information system to enhance their competing ability. To solve the problem of dynamic control on the user＇s authorization, an access control mechanism based on trust is proposed. Based on the evaluation of the user＇s trust degree the user in its access to the enterprise information system is dynamically authorized and controlled, thus the security of the enterprise information system improved.