关键词: 云环境,UCON,访问控制,授权管理,隐私策略 中图法分类号TP393文献标识码A

Abstract: UCON(Usage Control) access control model,by introducing two concepts of “obligation” and “conditon”,integrates the three technical fields of traditional access control model－confidence mana-gement and digital copyrigh management,and extends the cover scope in control mechanism of the model,which make it more adapt to cloud computing．In consideration of the privacy protection in UCON model,an authorized management control(AM-UCON) model based on encryption pattern was proposed．Based on identification and monitoring,the model uses multiple validation to improve the creditability in the renew of attributes and the correctness in authorization,to some extend,which can deal with the problem of malicious tampering for privacy strategies．Finally,the model’s realization process was given,and was achieved in the digital object release system based on cloud computing environment.

Key words: Cloud environment,UCON,Access control,Authorize manage,Privacy strategy