计算机科学 ›› 2012, Vol. 39 ›› Issue (6): 35-39.

• 计算机网络与信息安全 • 上一篇    下一篇

基于情景演算的动态访问控制模型

翟浩良,韩道军,李磊   

  1. (中山大学软件研究所 广州510275);(河南大学数据与知识工程研究所 开封475004)
  • 出版日期:2018-11-16 发布日期:2018-11-16

Dynamic Access Control Model Based on Situation Calculus

  • Online:2018-11-16 Published:2018-11-16

摘要: 访问控制模型定义了安全系统访问控制的整体框架。现有的访问控制模型大多是静态授权模型,尽管可以通过扩展来实现局部动态性(比如可以通过定义条件来实现角色的临时激活等),但在应用时受到了扩展元素的限制,并且已有的大部分模型无法描述授权的动态变化过程。针对以上问题,提出了一种基于情景演算的动态访问控制模型( SCDAC)。 SCDAC用逻辑事实和规则来描述访问控制属性和策略,把授权在某一时刻的状态(逻辑事实和规则集合)看作一个情景,通过动作来实现情景的变化,同时刻画了动作执行的前提条件和后续状态的变化情况。最后通过一个实例说明了用SCDAC来描述授权状态的动态变化是可行的。

关键词: 访问控制模型,动态,情景演算

Abstract: Access control model defines the whole framework of security system access control. The existing access control models are mostly static authorization models. Although the models can be extended to realize local dynamic nature(such as activate roles temporary by defining conditions of them),but they arc restricted by the cxtensional elements in real applications,and most of them can not describe the dynamic changes of the authorized process. To solve the problem,this paper proposed a dynamic access control model based on situation calculus(SCDAC). SCDAC describes the attributes and strategy of access control with logic facts and rules and treats the authorization state at an instance of time as a situation. It can achieve the changes of situation through actions, and portrays the preconditions of the action and successor state axioms. Finally an example was adopted to illustrate describing the dynamic changes of authorization states by SCDAC is feasible.

Key words: Access control model,Dynamic,Situation calculus

No related articles found!
Viewed
Full text


Abstract

Cited

  Shared   
  Discussed   
No Suggested Reading articles found!