Study on delegation with Chinese Wall security policy

Computer Engineering and Applications ›› 2011, Vol. 47 ›› Issue (29): 121-123.

• 网络、通信、安全 • Previous Articles Next Articles

Study on delegation with Chinese Wall security policy

YE Chunxiao1，HAN Yongzheng1，HU Haibo2

1.College of Computer Science，Chongqing University，Chongqing 400044，China
2.College of Software Engineering，Chongqing University，Chongqing 400044，China

Received:1900-01-01 Revised:1900-01-01 Online:2011-10-11 Published:2011-10-11

“Chinese Wall”安全策略中的委托研究

叶春晓1，韩永征1，胡海波2

1.重庆大学计算机学院，重庆 400044
2.重庆大学软件学院，重庆 400044

Abstract

Abstract: Delegation with “Chinese Wall” must satisfy not only regular delegation constraints，but Chinese Wall Security Policy（CWSP） as well.Existing delegation models pay little attentions to this field.This paper analyzes requirements and specificities of delegation with CWSP.Based on the extension of existing delegation models，this paper defines conflict role and role activation history to describe CWSP，and gives relations to restrict delegation with CWSP.Methods and steps of delegation are proposed with CWSP based on role.This paper proposes implementation architecture and some main algorithms.

Key words: role based access control, delegation, Chinese Wall Security Policy（CWSP）

摘要： Chinese Wall下的委托要求委托过程不但满足常见的委托约束条件外，还需要满足Chinese Wall Security Policy（CWSP）。现有的委托模型很少关注CWSP下的委托。分析了CWSP下委托的需求和特殊性。在对现有委托模型扩充的基础上，定义了冲突角色和角色激活历史来体现CWSP，给出了CWSP下进行委托需要满足的关系。提出了基于角色的CWSP下委托的方法与步骤。给出了系统实现框架和主要算法。

关键词: 角色访问控制, 委托, “中国墙”安全策略

YE Chunxiao1，HAN Yongzheng1，HU Haibo2. Study on delegation with Chinese Wall security policy[J]. Computer Engineering and Applications, 2011, 47(29): 121-123.

叶春晓1，韩永征1，胡海波2. “Chinese Wall”安全策略中的委托研究[J]. 计算机工程与应用, 2011, 47(29): 121-123.

[1]	YE Chunxiao1, XIA Wei1，SHEN Li2. RBAC delegation model with security audit function [J]. Computer Engineering and Applications, 2015, 51(15): 86-91.
[2]	TAO Yong, WANG Chengliang. Attributive-based RBAC policy representation and reasoning using OWL [J]. Computer Engineering and Applications, 2014, 50(19): 66-69.
[3]	ZHANG Bin1, SHANG Zheng2. Attribute restricted permission delegation mechanism and delegation conflict detecting method [J]. Computer Engineering and Applications, 2014, 50(16): 95-99.
[4]	YE Chunxiao1, YU Yifeng1, YU Longlong2. Permission-based delegation model for Usage Control [J]. Computer Engineering and Applications, 2014, 50(13): 77-81.
[5]	LIU Pengyuan1，2, SUN Baolin1. RBAC framework supporting poset and sync & async permission modeling [J]. Computer Engineering and Applications, 2014, 50(10): 108-115.
[6]	YE Chunxiao, LUO Juan, ZHOU Jiagen. Description of RBAC delegation model using ontology and SWRL [J]. Computer Engineering and Applications, 2013, 49(3): 109-112.
[7]	SHANG Zheng1，2, ZHANG Bin1，2. Access control policy for business process and its optimal methods in policy decision [J]. Computer Engineering and Applications, 2013, 49(19): 83-87.
[8]	SHI Weicheng¹，TAN Liang^1，2，ZHOU Mingtian³. Delegation tree model for DAC with character of periodicity constraints [J]. Computer Engineering and Applications, 2011, 47(6): 93-98.
[9]	Nurmamat Helil¹，Kaysar Rahman^1，2，Azhar Halik^1，2. Flexible hybrid RBAC model and inconsistency resolution [J]. Computer Engineering and Applications, 2010, 46(36): 101-104.
[10]	ZHONG Yong^1，2，GUO Wei-gang¹，ZHONG Chang-le¹. Extended RBAC model for multilevel relational database [J]. Computer Engineering and Applications, 2010, 46(33): 132-138.
[11]	Nurmamat Helil^1，2，Kaysar Rahman¹. Representaion of RBAC model with negative authorization in OWL and conflict detection [J]. Computer Engineering and Applications, 2010, 46(30): 82-85.
[12]	MU Ya-li^1，2，ZENG Hao³，YAO Hong². Role-task based controlled delegation model [J]. Computer Engineering and Applications, 2010, 46(3): 87-89.
[13]	GUI Jin-song¹,CHEN Zhi-gang¹,HU Yu-ping²,LIU Li¹. Delegation authorization framework model for grid workflow [J]. Computer Engineering and Applications, 2008, 44(8): 23-26.
[14]	SUN Wei¹,WU Chang-an¹,WANG Rui-min². Role-based constrained delegation model and constraints specification [J]. Computer Engineering and Applications, 2008, 44(36): 244-248.
[15]	ZHANG Mingwu Bo Yang. Delegation Graph Search Algorithms based DAG in Distributed Trust Management [J]. Computer Engineering and Applications, 2007, 43(4期): 125-127.

Study on delegation with Chinese Wall security policy

“Chinese Wall”安全策略中的委托研究

PDF

Knowledge

Abstract

Cite this article

share this article

References

Related Articles 15

Recommended Articles

Metrics