Aiming at the problem of imprecise and inefficient user role assignment in the role-based access control model in the cloud environment
the role-based access control model based on attribute and trust is designed. and A user-role assignment optimization algorithm based on this model is proposed
the algorithm combines the minimum role set searching and the attribute-based role filtering
by deleting the role activation in the hybrid role hierarchy and Role inheritance
get the smallest role set
through the user attributes
environmental attributes
trust value filter to get the best role set
and accurate match to the user. Simulation results show that this algorithm can effectively reduce the number of roles in the system
shorten the assignment time of user roles and improve the accuracy of user-role matching in the presence of a large number of user role assignments in the cloud environment.
关键词
Keywords
references
Qi H, Luo X, Di X, et al. Access Control Model Based on Role and Attribute and Its Implementation[C]// International Conference on Cyber-Enabled Distributed Computing and Knowledge Discovery. IEEE, 2017: 66-71.
Almulla S A, Chan Y Y. Cloud computing security man-agement[C] Second International Conference on Engineering Systems Management and ITS Applications. IEEE, 2010: 1-7.
Curran K, Carlin S. Cloud computing security[M]// Cloud Computing Basics. Springer New York, 2014: 14-19.
Joshi J B D, Bertino E, Latif U, et al. A Generalized Temporal Role-Based Access Control Model[J]. IEEE Transactions on Knowledge % Data Engineering, 2005, 17(1):4-23. DOI: 4
Majhi S K, Dhal S K. A Study on Security Vulnerability on Cloud Platforms [J]. Procedia Computer Science, 2016, 78:55-60. DOI: 55
LI Fenghua, SHI Guozhen, MA Jianfeng, et al. Research status and development trends of access control model[J]. Acta Electronica Sinica, 2012, 40(4): 805-813. DOI: 805
Zhang L, Zhang H L, Han D J, et al. Theory and Algorithm for Roles Minimization Problem in RBAC Based on Concept Lattice[J]. Acta Electronica Sinica, 2014, 42(12):2371-2378. DOI: 2371