论文部分内容阅读
充分考虑现代企业云存储的安全需求,依据企业的组织结构特征,提出一种灵活安全的针对企业数据存储的访问控制新模型:E-ABAC(Attribute-Based Access Control for Enterprise).与其它访问控制模型相比,E-ABAC模型最大的不同是为云存储平台中的主体和客体增加了组织结构属性,主体对客体的访问控制权限是以主客双方组织结构属性的匹配为依据.该模型不仅可以实现用户对企业数据的访问控制,使企业用户在没有得到授权的情况下无法访问,而且也可以通过改变客体属性标签实现企业内部和企业之间数据的自然、合理共享.最后将该模型运用到HDFS(Hadoop Distribute File System)进行实现.结果表明,该方法可以有效保障云存储系统用户对企业数据的访问权限控制和实现企业数据的受控共享.
Considering the security requirements of cloud storage in modern enterprises, a flexible and secure new model of access control for enterprise data storage is proposed based on the organizational structure of enterprise: E-ABAC (Attribute-Based Access Control for Enterprise) Compared with the model, the biggest difference of E-ABAC model is the addition of organizational structure attributes to the subject and object in the cloud storage platform. The subject access control authority to the object is based on the match between the organizational structure attributes of the two parties. So as to realize the user access control to the enterprise data so that the enterprise user can not be accessed without authorization and can also realize the natural and reasonable sharing of data between the enterprise and the enterprise by changing the object attribute tag.Finally, HDFS (Hadoop Distribute File System) .Results show that this method can effectively control the access rights of enterprise users to cloud storage system and realize the controlled sharing of enterprise data.