Abstract: Effective access control mechanism is one of research hotspots in the domain of P2P network, however, the traditional access control mechanisms are not suitable for P2P network, the distributed management system. This paper proposes an access control model of P2P network in multi-domain environments（TMAC）. It adopts the rationale of social network. The nodes of system will be distributed in several domains. By extending the multiple level security mechanism, this model realizes the access control. Before the transaction would be generated between the nodes, according to the trust level of the object node about the resource category, the subject node grants it different access privileges, so that, the goal of system security is achieved. The results of experiment show that this access control model is effective.

Key words: Peer-to-Peer network, social network, trust, multi-domain, access control, multiple level security

摘要： 有效的访问控制机制是P2P网络的研究热点之一，然而传统的访问控制机制并不能适用于P2P网络这样的分布式管理系统。针对该问题，给出了一种多域环境下的P2P网络访问控制模型（TMAC）。它采用了社会网络的基本原理，将系统节点划分成若干个不同的域，通过扩展多级安全机制来实现访问控制。节点之间进行交互时，主体节点将根据目标节点关于请求资源类别的信任等级授予不同的访问权限，以达到系统安全的目标。通过仿真实验验证了该访问控制模型的有效性。

关键词: P2P网络, 社会网络, 信任, 多域, 访问控制, 多级安全