Character constant weight method

Abstract

The present invention discloses an actor authority defining method. Its technical scheme includes the following contents: on the forced access frame MAC of operation system constructing a RBA implement system to make authorization for main body in safety operation system adopting forced access control MAC mechanism and configure management. The RBA implement system is formed from internal kernel implement module, RBA configuration file, system calling interface, library function and configuration and management tool. Besides, said invention also provides the concrete implement steps of said method by adopting said RBA implement system.

Description

technical field [0001] The invention relates to a method for improving computer security, especially a role-based authorization (Role Based Authorization, abbreviated as RBA) method for improving the security of a computer operating system and the manageability of the security of the operating system. Background technique [0002] As people pay more and more attention to information security, the security of the operating system, which is the basis for all application software, has received more and more attention. In order to improve the security of the operating system, the security of the operating system must be enhanced from many aspects, and the authorization method is one of the key technologies to ensure and improve the security of the operating system. [0003] The so-called authorization refers to properly granting the authority in the operating system to the main body of the operating system (that is, the user and the process of the application program), so that t...

AI Technical Summary

Problems solved by technology

[0011] The technical problem to be solved by the present invention is that for existing technical solutions, either the granularity of permission definition is coarse and the “least privilege” cannot be achieved, resulting in poor security, or the security is good but the configuration and management are too complicated, and the existing solutions are common. In order to solve the problem of poor security, a method of role determination is proposed: build an RBA implementation system on the MAC of the mandatory access control framework of the operating system. This system has nothing to do with security policies and can be applied to any operating system that implements the MAC framework of mandatory access control Such as Linux, TrustedBSD, etc.); the system authorizes and manages the configuration of subjects in the security operating system that currently adopts the MAC mechanism of mandatory access control, and realizes "least privilege" through static and dynamic "two-level authorization" methods to ensure high security , through role-based multiple inheritance and multiple constraints to achieve "privilege separation", while further improving security, greatly reducing the complexity of configuration and management, and extending MAC to achieve independence from security policies

Images