基于反馈的访问控制模型研究

现有访问控制模型中，用户一旦通过身份验证后其权限就固定了，而当用户变成不再可靠并在其权限范围内进行危害系统的操作时，现有访问控制模型不能动态调整其权限来避免危害。在权限管理基础设施（PMI）访问控制模型基础上定义了可靠因子及其计算方法来度量用户的可靠程度，并引入反馈机制，即用户登录时安全状况及行为操作都将对其权限产生反馈，有效地消除了现有模型所存在的隐患，为访问控制提供了新思路。

1tudy of Access Control Model Based on Feedback Mechanism and Reliable Factor

The existing PMI access control models have the static problem that the right of the user is fixed after the user is authenticated. However,when the reliable user becomes unreliable and does harm to the system,his right could not be adjusted dynamically. So the feedback mechanism based on the PMI access control model is introduced and the concept of reliable factor is raised. This could overcome the static problem of the former access control model,and thus some new thought is provided for the access contro...