| 基于二进制序列集合的策略合成代数框架 |
| |
| 引用本文： | 刘晨燕,潘理,訾小超.基于二进制序列集合的策略合成代数框架[J].上海交通大学学报,2013,47(4):579-583. |
| |
| 作者姓名： | 刘晨燕 潘理 訾小超 |
| |
| 作者单位： | （1.上海交通大学 电子信息与电气工程学院，上海 200240；2.上海市信息安全综合管理技术研究重点实验室，上海 200240） |
| |
| 基金项目： | 国家重点基础研究发展规划(973)项目，国家自然科学基金资助项目，上海市自然基金课题信息 |
| |
| 摘 要： | 从代数建模和实现机制相融合的角度出发，提出了一种基于二进制序列集合的策略合成代数框架.首先通过定义二进制序列集合元素及构造集合运算规则，将策略抽象成逻辑模型.然后针对多终端二进制决策树（MTBDD）的逻辑建模机制中存在的编码次序敏感以及规则冗余问题，提出了基于二进制序列的移位合并算法.最后推导基于二进制序列的合成语义算子，建立该代数框架.通过时间复杂性分析和仿真实验，验证了该框架的有效性，其合成性能优于基于MTBDD策略树的合成机制.
|
| 关 键 词： | 访问控制 属性 策略合成 |
| 收稿时间： | 2012-06-26 |
A Binary-String-Set-Based Algebraic Framework for Policy Composition |
| |
| LIU Chen-yan,PAN Li,ZI Xiao-chao.A Binary-String-Set-Based Algebraic Framework for Policy Composition[J].Journal of Shanghai Jiaotong University,2013,47(4):579-583. |
| |
| Authors: | LIU Chen-yan PAN Li ZI Xiao-chao |
| |
| Institution: | (1. School of Electronic, Information and Electrical Engineering, Shanghai Jiaotong University, Shanghai 200240, China; 2. Shanghai Key Laboratory of Information Security Synthesis Management Technique Research, Shanghai 200240, China)
|
| |
| Abstract: | A new algebraic framework was proposed for merging the algebraic model with the implementation mechanism. In this framework, the policy is converted into logic pattern by defining new binary string/binary string set and constructing a new set of operation rules. Depending on that, an algorithm named rotate-combination is issued to solve the problem of order-sensitivity and rule-redundancy in MTBDD mechanism. By deriving the semantic operators and formulating the policies composition as expressions of the algebra, a new model was set. Furthermore, an analysis of the time complexity and simulation results were given to demonstrate the effectiveness of the framework, and its performance is better than that of the MTBDD-based mechanism. |
| |
| Keywords: | access control attribute policy composition |
| 本文献已被 CNKI 万方数据 等数据库收录！ |
| 点击此处可从《上海交通大学学报》浏览原始摘要信息 |
| 点击此处可从《上海交通大学学报》下载免费的PDF全文 |
