云环境下访问控制面临的问题和云访问控制技术
|
摘要
针对我国现代云端访问控制技术过程中的问题,为了能够有效满足云端数据可靠、可信和可控的安全管理需求,就针对云环境下的安全分析对云访问控制技术进行全面的研究。将传统访问控制管理技术作为基础,对云访问控制技术进行研究,实现云环境中访问控制管理模型的设计,将云环境中资源划分逻辑安全域,从而能够实现云环境中资源在不同逻辑之间的安全共享访问。之后对模型进行验证分析,通过结果表示,本文所设计的模型能够对云环境中不同逻辑安全与的资源信息共享访问进行支持,并且还能够实现不同逻辑域在共享访问过程中的权限渗透及权限问题的提高提供良好的规避,为云环境中的访问控制管理进行参考。
In view of China's modern cloud access control technology in the process of the problem,in order to meet the requirements of security management in cloud data is reliable,trustworthy and controllable,in the cloud environment safety analysis to conduct a comprehensive study on cloud access control technology. The traditional access control technology as the basis of cloud access control technology research and design of access control management model to realize the cloud environment,the security domain division of the logic resources in the cloud environment,thus can realize the security resources in the cloud environment in different logic between shared access. After the model was validated by the analysis results show that the model can share access to support resources information security in the cloud environment and different logic,and also can achieve different logical domain to provide good penetration and avoid the authority in the process of sharing access permissions to improve,for reference in cloud environment access control management.
In view of China's modern cloud access control technology in the process of the problem,in order to meet the requirements of security management in cloud data is reliable,trustworthy and controllable,in the cloud environment safety analysis to conduct a comprehensive study on cloud access control technology. The traditional access control technology as the basis of cloud access control technology research and design of access control management model to realize the cloud environment,the security domain division of the logic resources in the cloud environment,thus can realize the security resources in the cloud environment in different logic between shared access. After the model was validated by the analysis results show that the model can share access to support resources information security in the cloud environment and different logic,and also can achieve different logical domain to provide good penetration and avoid the authority in the process of sharing access permissions to improve,for reference in cloud environment access control management.
引文
[1]方忠进,夏志华,周舒.基于属性加密的气象云数据访问控制策略研究[J].计算机科学,2013,40(12):205-207.
[2]王静宇,李淑梅,郑雪峰.一种基于属性加密的细粒度云访问控制方案[J].微电子学与计算机,2015,12(9):33-39.
[3]冯朝胜,秦志光,袁丁,等.云计算环境下访问控制关键技术[J].电子学报,2015,43(2):312-319.
[4]王猛. CP-ABE及云计算技术下的数据访问控制实现策略[J].现代电子技术,2016,39(14):92-94.
[5]常玲霞,王凤英,赵连军,等. CT-RBAC:一种云计算环境下的访问控制模型[J].微电子学与计算机,2014,11(6):152-157.
[6]付雄,徐松,周代明.云计算环境下基于信任的访问控制模型研究[J].计算机技术与发展,2015,15(9):139-143.
[7]王于丁,杨家海,徐聪,等.云计算访问控制技术研究综述[J].软件学报,2015,26(5):1129-1150.
[8]张浩,赵磊,冯博,等. CACDP:适用于云存储动态策略的密文访问控制方法[J].计算机研究与发展,2014,51(7):1424-1435.
[9]池亚平,王艳,王慧丽,等. CCF BigData 2015+213基于等级的电子政务云跨域访问控制技术研究[J].计算机应用,2015,12(3):54-55.
[10]霍亮,罗军,王鑫龙.云存储环境下基于密钥的多级安全访问控制机制研究[J].网络安全技术与应用,2015,20(11):59-59.
[11]许静,苗炬,许峥.云计算环境下应用资源访问控制架构研究[J].无线电工程,2017,47(4):7-11.
[12]吴正学,戴牡红.云计算中基于否定规则的访问控制技术的研究[J].计算机应用与软件,2014,15(1):30-33.
[13]牛宇,颜苗苗,郑红,等.云计算环境下医疗数据访问控制研究综述[J].智慧健康,2016,2(2):23-28.
[14]张婷,杨庚,滕玮,等.云计算中基于属性和定长密文的访问控制方法[J].计算机技术与发展,2013,18(11):128-132.
[15]王静宇,冯黎晓,郑雪峰.一种面向云计算环境的属性访问控制模型[J].中南大学学报(自然科学版),2015,12(6):2090-2097.
[16]池亚平,王艳,王慧丽,等.基于等级的电子政务云跨域访问控制技术[J].计算机应用,2016,36(2):402-407.
[2]王静宇,李淑梅,郑雪峰.一种基于属性加密的细粒度云访问控制方案[J].微电子学与计算机,2015,12(9):33-39.
[3]冯朝胜,秦志光,袁丁,等.云计算环境下访问控制关键技术[J].电子学报,2015,43(2):312-319.
[4]王猛. CP-ABE及云计算技术下的数据访问控制实现策略[J].现代电子技术,2016,39(14):92-94.
[5]常玲霞,王凤英,赵连军,等. CT-RBAC:一种云计算环境下的访问控制模型[J].微电子学与计算机,2014,11(6):152-157.
[6]付雄,徐松,周代明.云计算环境下基于信任的访问控制模型研究[J].计算机技术与发展,2015,15(9):139-143.
[7]王于丁,杨家海,徐聪,等.云计算访问控制技术研究综述[J].软件学报,2015,26(5):1129-1150.
[8]张浩,赵磊,冯博,等. CACDP:适用于云存储动态策略的密文访问控制方法[J].计算机研究与发展,2014,51(7):1424-1435.
[9]池亚平,王艳,王慧丽,等. CCF BigData 2015+213基于等级的电子政务云跨域访问控制技术研究[J].计算机应用,2015,12(3):54-55.
[10]霍亮,罗军,王鑫龙.云存储环境下基于密钥的多级安全访问控制机制研究[J].网络安全技术与应用,2015,20(11):59-59.
[11]许静,苗炬,许峥.云计算环境下应用资源访问控制架构研究[J].无线电工程,2017,47(4):7-11.
[12]吴正学,戴牡红.云计算中基于否定规则的访问控制技术的研究[J].计算机应用与软件,2014,15(1):30-33.
[13]牛宇,颜苗苗,郑红,等.云计算环境下医疗数据访问控制研究综述[J].智慧健康,2016,2(2):23-28.
[14]张婷,杨庚,滕玮,等.云计算中基于属性和定长密文的访问控制方法[J].计算机技术与发展,2013,18(11):128-132.
[15]王静宇,冯黎晓,郑雪峰.一种面向云计算环境的属性访问控制模型[J].中南大学学报(自然科学版),2015,12(6):2090-2097.
[16]池亚平,王艳,王慧丽,等.基于等级的电子政务云跨域访问控制技术[J].计算机应用,2016,36(2):402-407.