一种新型访问控制技术研究

使用控制（UCON）是对访问控制的一种概述，它包含授权、职责、条件、连续性（正在进行的控制）和易变性。通常来说，访问控制只是对主体访问的目标资源进行授权，作为访问的结果并没有进行系统的分析研究。文章根据使用控制的需求，研究了一种ABC模型，该模型定义为使用控制的核心模型，并且说明了它是怎样包含了传统的访问控制。例如强制的、自主的、基于角色的访问控制。另外，也讨论了它的体系结构。引入了一种全新的对使用控制及其变化的监控方法。

Research on a New Access Control Model

The term usage control(UCON)1] is a generalization of access control to cover obligations,conditions,continuity(ongoing controls) and mutability.Traditionally,access control has dealt only with authorization decisions on a subject’s access to target resources,and as a consequence of access have not been systematically studied.In this paper,the need for usage control is motivated,a family of ABC models as a core model for usage control and show how it encompasses traditional access control,such as mandatory,discretionary and role-based access control.In addition,architectures is also discussed that introduce a new reference monitor for usage control and some variations.