利用RBAC实现各个管理域间的安全互访

在分布式环境下,各个管理域间的安全互作用和互操作受到人们的关注.为了能够实现各个管理域之间的安全互访,Kapadia等人[Kap00]提出了IRBAC2000模型,该模型为多个域之间的动态角色转换建立一个灵活的策略框架.然而在一些特殊情况下,也带来了角色冲突的问题,域穿梭问题没有具体地解决.本文对IRBAC模型下的一些冲突和域穿梭给出了解决的方案.

Deal Secure Interaction between Administrative Domains with RBAC

In the distributed environment, the secure interaction between two or more administrative domains is a major concern, in order to sinteroperate securely between each administrative domains, Kapadia et al. [Kap00]proposed the IRBAC 2000 model, which can be used to establish a flexible policy for dynamic inter-domain role translations.however, there are some poblems that can't be resolved. This paper proposed the solution for role conflicts and domain crossing in IRBAC model.