云计算环境中基于对象和用户的角色访问控制模型*

针对云计算环境中资源按需访问的特点以及不同资源不同用户访问控制的特殊性,基于基本角色访问控制模型(role-based access control,RBAC),提出一种基于对象和用户的角色访问控制模型OURBAC(object-and-user based on RBAC);并设计了具体的用户访问权限判定规则。以实际实现应用为背景,设计了OURBAC的具体实现流程,对算法的安全性进行了分析,表明本算法使云资源访问控制得以进一步细化,能明显减少系统中角色数量,有效的提高了系统运行效率及安全性。

HAN Xiao-guang1, YAO Xuan-xia1, QU Wu2,3, SUO Yan-feng1

In the cloud computing environment, access control is on-demand and it requires users under control when accessing different resources. Based on the theory of role-based access control (RBAC), this paper presented OURBAC according to the characteristic. It is a new access control model based on role access of users and objects. The paper also designed access permission rules of authority judgment for specific user. The algorithm used in OURBAC model made the cloud resource access control be further refined, and significantly reduced the number of roles in the system to improving the operation system efficiency and safety effectively. Based on the actual implementation of application, this paper designed the implementation process of OURBAC model and theSsecuritySof the algorithm was analyzed.