论文部分内容阅读
随着我国电子政务的发展,如何保障电子政务中的资源信息不被非法访问已成为当务之急。如何进行用户对资源和服务使用的限制,决定主体是否对客体有权限进行某种操作,即对用户进行访问控制的问题信息安全研究中的重要方面。授权来源于访问控制,即先对用户进行授权,然后根据用户具有的权限来进行访问控制。属性证书包含了一系列用户的权限信息,所以属性证书可以看作是权限信息的载体。根据属性证书中用户的权限信息可以对用户访问资源进行控制,基干角色的访问控制(RBAC)是一种新兴的访问控制技术和理念,是将用户划分成与其职能和职位相符合的角色,根据角色赋予相应操作权限,以减少授权管理的复杂性,降低管理开销和为管理员提供一个比较好的实现复杂安全政策的环境,是传统的自主访问控制和强制访问控制的升级和替代。RBAC的建模和实现技术是目前RBAC技术研究的热点和难点。NRBAC模型是一种更接近现实情况的模型。基于属性证书和电子政务中存在的特殊要求和特点,结合RBAC96、ARBAC97模型以及NRBAC模型,构造了一个适合电子政务系统使用的基于角色的安全访问控制模型eGA-NRBAC;利用该访问控制模型解决了电子政务工程中授权管理系统和授权服务系统的工程化实现问题。测试和实际使用都证明了此访问控制模型的正确性、可行性和可靠性。
With the development of e-government in our country, how to protect the resource information in e-government from being accessed illegally has become a top priority. How to carry out the restrictions of users on the use of resources and services, and decide whether the subject has the right to perform certain operations on the objects, that is, the important aspects of information security research on the problem of user access control. Authorization comes from the access control, that is, to authorize the user first, and then access control according to the user’s permission. Attribute certificate contains a series of user’s permission information, so attribute certificate can be regarded as permission information carrier. RBAC is an emerging access control technology and concept, which divides users into roles that are consistent with their functions and positions. According to RBAC, user access to resources can be controlled according to user’s authority information in attribute certificates. According to RBAC, Role to give the appropriate operating authority to reduce the complexity of the authorization management, reduce management overhead and provide administrators with a better environment for implementing complex security policies is the upgrade and alternative to traditional autonomous access control and mandatory access control. RBAC modeling and implementation technology is the hot and difficult point of current RBAC technology research. NRBAC model is a more realistic model. Based on the special requirements and characteristics of attribute certificates and e-government, this paper constructs a secure role-based access control model eGA-NRBAC for e-government system based on RBAC96, ARBAC97 model and NRBAC model. By using this access control model, E-government project authorization management system and authorized service system engineering realization. Test and actual use prove the correctness, feasibility and reliability of this access control model.