Action-Based Access Control Model and Administration of Actions ( 1.Key Laboratory of Computer Networks and Information Security,Xidian University,Xi'an,Shaanxi 710071,China; 2.Graduate School,Beijing Electronic Science and Technology Institute,Beijing 100070,China)

LI Feng-hua; WANG Wei; MA Jian-feng; LIANG Xiao-yan

您当前的位置：

首页 >

文章列表页 >

Action-Based Access Control Model and Administration of Actions ( 1.Key Laboratory of Computer Networks and Information Security,Xidian University,Xi'an,Shaanxi 710071,China; 2.Graduate School,Beijing Electronic Science and Technology Institute,Beijing 100070,China)

更新时间：2025-07-16

- Action-Based Access Control Model and Administration of Actions ( 1.Key Laboratory of Computer Networks and Information Security,Xidian University,Xi'an,Shaanxi 710071,China; 2.Graduate School,Beijing Electronic Science and Technology Institute,Beijing 100070,China)
- Acta Electronica Sinica Vol. 36, Issue 10, Pages: 1881-1890(2008)
- 作者机构：
  
  1. 西安电子科技大学计算机网络与信息安全教育部重点实验室,陕西,西安,710071
  2. 北京电子科技学院研究生处,北京,100070
  3. 西安电子科技大学计算机网络与信息安全教育部重点实验室陕西西安,710071
  4. 北京电子科技学院研究生处北京,100070
- 作者简介：
- 基金信息：
- DOI：
  CLC： TP309.2
- Published：2008
- 稿件说明：
移动端阅览
LI Feng-hua, WANG Wei, MA Jian-feng, et al. Action-Based Access Control Model and Administration of Actions ( 1.Key Laboratory of Computer Networks and Information Security,Xidian University,Xi'an,Shaanxi 710071,China; 2.Graduate School,Beijing Electronic Science and Technology Institute,Beijing 100070,China)[J]. Acta Electronica Sinica, 2008, 36(10): 1881-1890.
DOI：

LI Feng-hua, WANG Wei, MA Jian-feng, et al. Action-Based Access Control Model and Administration of Actions ( 1.Key Laboratory of Computer Networks and Information Security,Xidian University,Xi'an,Shaanxi 710071,China; 2.Graduate School,Beijing Electronic Science and Technology Institute,Beijing 100070,China)[J]. Acta Electronica Sinica, 2008, 36(10): 1881-1890. DOI：

摘要

访问控制模型是对信息资源进行授权决策的重要方法之一.首先给出了环境的定义

结合角色、时态和环境的概念

给出了行为的定义.在不同的信息系统中

行为可以用来综合角色、时态状态和环境状态的相关安全信息.然后介绍了行为、时态状态和环境状态的层次结构

提出了基于行为的访问控制模型ABAC(Action-Based Access Control Model)

并讨论了在ABAC模型中角色、时态状态和环境状态之间的相互关系.在此基础上

通过引入受限的时态状态和环境状态

给出了管理行为的定义和ABAC管理模型的结构;描述了ABAC管理模型下用户-管理行为、管理行为-管理权限的控制关系

使用Z-符号形式化地描述了行为状态管理中使用的管理函数AddAction、ModifyAction和DeleteAction

以及和ABAC管理模型相关的管理方法.与已有其他模型相比

ABAC模型更加适用于解决网络环境下支持移动计算的信息系统中的访问控制问题.

Abstract

Access control is one of the powerful and generalized approaches of authorization decisions on information resources.Firstly

the environmental state is introduced and the term "action" is defined based on roles

temporal states and environmental states.Actions can be used to capture security-relevant aspects of roles

temporal states and environmental states in different information systems.Then

the action hierarchy

temporal hierarchy

environmental hierarchy and Action-Based Access Control(ABAC)model are presented.And the relationship among roles

temporal states and environmental states are analyzed.By introducing the limited temporal states and environmental states

the administrative action and administrative model for ABAC are described.The controlling relations of user-administrative action and administrative action-administrative permission are proposed.By Z-notation

the functions of AddAction

ModifyAction and DeleteAction are introduced.Moreover

the related methods for ABAC administrative model are presented.Compared with the existing models

the ABAC model can solve the problem of access control in information systems with mobile computation.

关键词

Keywords

references

Views

2140

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Formalization and Verification of Privacy Preserving Protocol Based on User Consent

A CP-ABE Scheme with Cloud Proxy Re-Encryption

Research Progress on Attribute-Based Access Control

Progress of Cryptographic Access Control and Encryption Security Database

Fine-Grained Role Delegation Model Based on Mapping Mechanism

Related Author

MA Li

JIANG Huo-wen

PENG Yun

ZHAO Kai-qiang

KANG Ping

LIU Bin

GUO Zhen

FENG Chao-sheng

Related Institution

School of Digital Industry， Jiangxi Normal University

School of Big Data Science， Jiangxi Science & Technology Normal University

The No.30 institute of China Electronic Technology Corporation

Network and Data Security Key Laboratory of Sichuan Province， University of Electronic Science and Technology of China

Department of Computer Science， Sichuan Normal University

⁰