Research on Safe Privilege Management Model in Trusted-Domains

摘要

Secure interaction between trusted-domains is a major problem on network security. Combining with the advantages of Role-based Access Control (RBAC) and the existing authentication technique on crossing the trusted-domain, this paper proposes a privilege management model on crossing the trusted-domains (PMCT) which is suitable for large scale distributed network. Role recommending policy and unilateral role mapping policy are proposed to back the safe access between two trusted-domains. By using set theory and the logic of predication, we give formal description of the PMCT Model systematically, then put forward a suit of rules on privilege and safety, and analyze the security characteristic of PMCT Model. Finally, the safe application of this model is demonstrated by showing how it can be used in an access control system.