Security access control policy of information system under multi-domain mode. (2018)

• Record Type: Journal Article
• Authors: Dong, Jun; Zhao, Qiang
• Is Part Of: International journal of internet protocol technology. Volume 11:Number 1(2018)
• Page Start: 44
• Page End: 50
• Publication Date: 2018
• Subjects: access control -- multi-domain -- XACML -- conflict detection -- inconsistency -- RBAC; File Transfer Protocol (Computer network protocol) -- Periodicals; Multicasting (Computer networks) -- Periodicals; 004.678
• Languages: English
• ISSNs: 1743-8209

Abstract

The research of this article is ensuring the security implementation of multi-domain secure access control behaviour, through the study on unified description language for security policy, strategy conflict classification and strategy conflict detection. Based on current related technologies and combined with the feature of multi-domain system, the framework of access control strategy management is proposed, which specified the content of access control management. We adopt XACML that has better across-platform and scalability to describe the policy uniformly. Then access control policy description template based on XACML is provided and the security policy conflict is classified reasonably according to the factors causing conflict. Then we put forward a model to detect the inconsistency of RBAC and RH in time and space constraint, to design an access control model which needs pruning and collection. It uses logic analysis to strength the conflict detection for developing security policy integration. The simulation shows our work can provide filter on quantities of irrelevant policy and return potential policies to solute the conflict.