一种基于Clark-Wilson模型的职责分离算法及应用

目前许多行业采用数据集中处理和存储，使管理员的权限过于集中，这就带来了新的安全风险，许多单位为了防范这种风险仅仅从制度上进行了限定，而没有技术上的保障，致使制度行同虚设。本文提出和实现了一种基于Clark—Wilson模型的职责分离算法，该算法主要用于分散过于集中的权限。通过实际的应用表明，该算法达到了分散权限的目的，防范了上述风险，保证了数据的完整性。

A Method to Separate the Duties and its Application Based on Clark-Wilson Model

At present, many industries are adopting the method of processing and storing the data by putting them together. This concentrates the managing staff's right, which bring about new risk. To control this risk, many offices only limit them by means of rules, which cannot be guaranteed by the using techniques, therefore the rules exist in namely only. In this paper, a method to separate the duties based on Clark-Wilson model is put forward and realized. The practical uses prove that this method can really separate the right, reduce the risks mentioned above, and keep the completeness of the data.