提出一种基于角色的透明计算应用权限控制模型TCACM(Transparent computing access control model).该模型能够较好地解决透明计算中的系统安全性问题.该模型由客户端和服务器端两部分组成.客户端启动应用程序
计算出应用程序的数据指纹
将其与服务器端"安全应用程序"数据库匹配
进行完整性验证; 根据授权角色权限集进行授权验证
由验证结果动态地管理用户可运行应用程序集.实验结果验证了该模型的可行性.
Abstract
A TCACM (Transparent computing access control model) based on role in transparent computing environment is proposed. The model can solve the problem of system security in transparent computing. The model consists of two parts: the client and the server. The client initiates the application
calculates the applications data fingerprint
matches it with the server-side "security application" database for integrity verification. According to the authorization role permission set for authorization verification
by the verification results dynamically manage the user can run the application set. The experimental results verify the feasibility of the model.
关键词
Keywords
references
Zhang Yaoxue, Zhou Yuezhi. Transparent computing: spatio-temporal extension on von neumann architecture for cloud services[J]. Tsinghua Science and Technology, 2013, 18(1): 10-21. DOI: 10
SASSU R, RAMUNNO G, LIOY A. Practical assessment of biba integrity for TCG-Enabled platforms[C] //2014 IEEE 13th International Conference on Trust, Security and Privacy in Computing and Communications. IEEE, 2014: 495-504.
ZHANG Y, ZHOU Y. 4VP+: A novel Meta OS approach for streaming programs in ubiquitous computing[C]// Proc. of the IEEE 21st International Conference on Advanced Information Networking and Applications (AINA 2007). Niagara Falls, Canada, 2007: 394-403.
LIU G, ZHANG J, LIU J, et al. Improved Biba model based on trusted computing [J]. Security and Communication Networks, 2015, 8(16)2793-2797. DOI: 2793
LU J, JAMES B D JOSHI, JIN L, et al. Towards complexity analysis of User Authorization Query problem in RBAC[J]. COMPUTERS % SECURITY, 2015, 48: 116-130. DOI: 116
Ferrara A L, Madhusudan P, Parlato G. Security analysis of role-based access control through program verification [C]// Proc of the 25th IEEE Computer Security Foundations Symposium. Cambridge: IEEE Press, 2012: 113-125.
KIVIHARJU M. RBAC with ABS: Implementation practicalities for RBAC integrity policies[C]// 2014 11th International Conference on Security and Cryptography (SECRYPT). IEEE, 2014: 1-10.
LI Y, ZHAO D, LI H, et al. HMAC-SHA1 Applied in the diagnosis service for security access[C]//Proceedings of SAE-China Congress 2014: Selected Papers. Springer Berlin Heidelberg, 2015: 507-512.
ANSI. American national standard for information technology: role based access control[S]. New York: American National Standard Institute, 2004.
Yaoxue Zhang, Yuezhi Zhou. Separating computation and storage with virtualization[J]. Computer Communications, 2011, 34(13): 1539-1548. DOI: 1539
ZHAO H, WANG H, LI H. Analysis and improvement of the BLP security model [C]//Advanced Materials Research. Trans Tech Publications, 2014, 998: 578-581.
Zhang Hong, He Ye-Ping, Shi Zhi-Guo. A delegation model for periodicity constraints-based DAC[J]. Chinese Journal of Computer, 2006, 29(8): 1427-1437. DOI: 1427