Access control model and its application for collaborative information systems

LI Feng-hua1; WANG Wei1; MA Jian-feng1; LIU Hong-yue1

您当前的位置：

首页 >

文章列表页 >

Access control model and its application for collaborative information systems

更新时间：2024-10-14

- Access control model and its application for collaborative information systems
- Issue 9, Pages: 116-123(2008)
- 作者机构：
  
  西安电子科技大学计算机网络与信息安全教育部重点实验室
- 作者简介：
- 基金信息：
- DOI：
  CLC： TP311.52
- Published：2008
- 稿件说明：
移动端阅览
LI Feng-hua1, WANG Wei1, MA Jian-feng1, et al. Access control model and its application for collaborative information systems[J]. 2008, (9): 116-123.
DOI：

LI Feng-hua1, WANG Wei1, MA Jian-feng1, et al. Access control model and its application for collaborative information systems[J]. 2008, (9): 116-123. DOI：

摘要

资源授权决策是协作信息系统面临的首要安全问题。首先结合角色、时态和环境的概念

介绍了行为的含义和基于行为的访问控制模型ABAC(action-based access control model)

然后基于ABAC模型

给出了协作信息系统访问控制机制的流程;提出了包含用户请求、用户身份、口令、角色、时态状态、环境状态、生命期等安全属性的安全关联及其产生方法;给出了一种安全认证协议

使用此协议可以实现用户与行为服务器、资源管理服务器之间交换与ABAC模型相关的安全属性

并使用UC模型证明该协议的安全性。

Abstract

The authorization decision on resources is the major problem in collaborative information systems.Firstly

the term "action" was defined based on roles

temporal states and environmental states

and the action-based access control（ABAC） model was presented.Then

the access control mechanism based on ABAC for collaborative information sys-tems was introduced.The security association was defined and its producing procedure was proposed

which contains security properties such as user request

user identity

password

role

temporal state

environmental state and lifetime.Finally

to exchange the security properties among user

action server and resources management server

a secure authen-tication protocol was proposed

and its security was proven under the universally composable model.

关键词

Keywords

references

Views

1340

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Lightweight authentication key agreement protocol for Internet of vehicles

Reversible data hiding in encrypted domain based on fine-grained access control

Byzantine fault-tolerant distributed access control mechanism for the Internet of things

Modeling and verification of data circulation control based on timed automata

Multi-keyword attribute-based searchable encryption scheme supporting re-encryption for cloud storage

Related Author

LIU Yali

PANG Xiaohui

CHEN Dongdong

WANG Pengchao

ZHOU Yi

ZHANG Minqing

PENG Shen

JIANG Chao

Related Institution

College of Computer Science and Technology, Jiangsu Normal University

State Key Laboratory for Novel Software Technology, Nanjing University

Guangxi Key Laboratory of Cryptography and Information Security, Guilin University of Electronic Technology

School of Cyber Science and Engineering, Southeast University

College of Cryptography Engineering, Engineering University of PAP

AI问答

⁰