Dissertation > Excellent graduate degree dissertation topics show

Rule-based study commissioned by authorized

Author: LiuBo
Tutor: SunYuQing
School: Shandong University
Course: Applied Computer Technology
Keywords: Access Control Role-based access control Delegation of authority Security constraints
CLC: TP393.08
Type: Master's thesis
Year: 2008
Downloads: 77
Quote: 2
Read: Download Dissertation

Abstract

With the distributed technology and network technology continues to evolve, computer security situation has become increasingly severe. Making information sharing and resource access at the same time, we must take into account the security of the system, while access control is one kind of behavior by constraining the user access to sensitive information and achieve the purpose of the security services in isolation mechanism. Access control is through proper access rights management to implement the system of information and resources to protect the user of system information is inappropriate and unauthorized access. Access control study not only in theory, can make use of formal methods to describe the system elements that accurately represent security policies for system safety certification, but also in applications that can directly affect the system's usability, ease of use and security. Thus, the access control model and technology research not only has important theoretical value, but also has a wide application value. Delegation of authority is an important mechanism for access control. Refers to the system of delegation of authority will be subject to delegate permissions to other body such privileges receiver can perform according to the requirements of the former work, thereby increasing the flexibility of authorization management to deal with anomalies. In the existing distributed systems, often there will be a user needs to execute on behalf of another user that he has a right to a certain, therefore commissioned an authorized research has important applications. Currently on research commissioned authorization model is mainly based on the role-based, but these models are not perfect, for example, commissioned by authorized security constraints on how the complex role hierarchy for delegation of authority and so no detailed discussion of the security constraints and role hierarchy is to protect information systems security and prevention of errors mistakes a basic techniques, so in large-scale distributed systems is a need for a more powerful mechanism to provide effective privilege delegation and revocation of authorization management. This paper analyzes the delegation of authority in access control mechanism for role-based access control model and security constraints, complex role hierarchy consistency with key issues such as security constraints, in-depth research. This paper work and innovations are as follows: 1. Proposed a rule-based delegation authorization model. The model took into account a variety of basic safety requirements and business needs, through a variety of security constraint rules implementing restrictions on the delegation of authority to ensure flexibility in supporting the mandate, while ensuring security authorization. Delegate authority and rule-based model with the existing delegation model were compared. 2 algorithm proposed delegation of authority, delegated authorization model to solve the complex problem of the role hierarchy delegation of authority. In this paper, based on the role hierarchy levels defined roles, role domain concepts, and the roles of different levels within the hierarchy between roles delegated authority were discussed specific examples of the application of the algorithm for analysis. 3 In the implementation of the delegated authorization mechanism, there are bound to add some constraint rules, these constraints may be introduced rules and the rules of the original conflict. This article discusses the various security policies and the consistency between the security constraints, by constraining the conflict detection and strategy adjustment and integration, eliminate the conflict, to achieve consistency of authorization. 4 combined with the application of the hospital system, we proposed the application of delegated authorization model framework for the various modules within the framework of a functional analysis and process descriptions, and constraint rules are described in detail.

Related Dissertations

CLC: > Industrial Technology > Automation technology,computer technology > Computing technology,computer technology > Computer applications > Computer network > General issues > Computer Network Security
© 2012 www.DissertationTopic.Net Mobile