关键词: 多级安全,强制访问控制,时空隔离,安全监控器

Abstract: Based on secure domain separation model,the research in secure architectures of embedded systems proposed a method of the secure access control,which supports multi-level secure separation of information stream with the message router between partions and messages authority based on the secure partition kernels．In order to implement the multi-level security embedded operating system,the structure of the secure access control mechanism was presented according to the secure domain separation model．The security analysis results prove that the proposed method can keep from security threats includeing illegal resource accessing,identity personation,information revealing and cover channel etc.The perfangmance analysis results show that the synthetical comsuming is about 10% with importing the security access control mechannism.

Key words: Multi-level security,Mandatory access control,Space separation,Security monitor