Method for generating cross-domain access control strategy by rising from credit assessment to trust management

Abstract

The invention relates to a method for generating a cross-domain access control strategy by rising from credit assessment to trust management. According to the method, a credit assessment model is established to realize a corresponding credit assessment subsystem; uncertainty assessment is carried out on a credit degree of an evaluated entity according to evaluation information given by an interaction entity; association relations between an attribute of an assessment entity, an attribute of an assessed entity, a resource attribute, a behavior attribute, an environment attribute and an entity credit degree are extracted; and then an access control strategy based on attributes is generated and description is carried out by an extensible access control mark language; at last, the generated access control strategy is converted into a strategy of a concrete trust management system. According to the invention, authorization strategy is generated dynamically according to behavior and environment attributes of an entity; and the method has good self adaptability and can be applied to cross-domain environments like cloud calculating having a lot of unfamilar entities.

Description

technical field [0001] The invention belongs to the field of computer network security, in particular to the field of access control in a multi-trust domain environment, and specifically relates to a cross-domain access control strategy generation method that is upgraded from reputation evaluation to trust management. Background technique [0002] Reasonable authorization and access control is an urgent problem to be solved for new Internet applications such as cloud computing and Internet of Things, and it is also the key to whether these new computing models can carry core services. Traditional authentication-based authorization is only suitable for closed, familiar user groups and relatively static environments, and it is difficult to adapt to open, public-accessible dynamic environments. In recent years, a large number of domestic and foreign scholars have studied the issue of secure access in an open environment from the perspective of how to dynamically establish trust...

AI Technical Summary

Problems solved by technology

This method centering on trust management and using reputation evaluation as an adjustment mechanism does not fundamentally solve the problem, and the adaptation to the dynamic environment is limited to the scope stipulated by the pre-set trust management strategy. A finer-grained policy that specifically applies the behavioral characteristics of an entity

Images