Military Information System Access Control Architecture Based on SDO-ARBAC Model

Having reasonable military information system (MIS) access control architecture, is the important premise and foundation of its safe access. By describing the basic design of its access control architecture, in this paper, access control architecture cent

  • PDF / 351,859 Bytes
  • 10 Pages / 439.37 x 666.142 pts Page_size
  • 2 Downloads / 218 Views

DOWNLOAD

REPORT


Abstract Having reasonable military information system (MIS) access control architecture, is the important premise and foundation of its safe access. By describing the basic design of its access control architecture, in this paper, access control architecture center, hierarchical structure, and access control workflow of Security Domain Oriented-Administrative Role-Based Access Control (SDOARBAC) are discussed, SDLACA access control architecture based on SDOARBAC is put forward, which provides theoretical reference for bettering MIS access control architecture. Keywords Security domain management

 Architecture centre  Access

control

 Domain

1 Introduction With wide military using of information technology, military information system (MIS) access control has become a key problem, which affects the whole command information system and its resource security, and its performance and application. Studying on the theory and technology of command information system access control, is of great realistic significance of advancing its healthy L. Sun (&)  Y. Jin The Fourth Department, National Defense Information Academy, Wuhan, China e-mail: [email protected] H. Liu Information Teaching and Research Section, Nanchang Military Academy, Nanchang, China F. Li Scientific Research Department, National Defense Information Academy, Wuhan, China

Z. Wen and T. Li (eds.), Practical Applications of Intelligent Systems, Advances in Intelligent Systems and Computing 279, DOI: 10.1007/978-3-642-54927-4_60,  Springer-Verlag Berlin Heidelberg 2014

637

638

L. Sun et al.

development and application, ensuring generating and strengthening of its supporting capability, and forming systematic operational capability based on information system. And bettering MIS access control architecture is the important part of realizing MIS cross-domain access control.

2 Basic Design of MIS Access Control Architecture Military information system has distributed architecture and applications, distinctive characteristics of being open, autonomous and heterogeneous, strict security requirements, and a variety of access control requirements, which requires guidance, construction, implementation, and maintenance of MIS access control architecture. And its design should pay attention to meet the demands of autonomy, flexibility, dynamics, security, and scalability. SDIACA is a sound access control architecture.

2.1 Design Goals of SDIACA SDIACA is a kind of MIS access control architecture based on the Security Domain Oriented-Administrative Role-Based Access Control (SDO-ARBAC) model. Security Domain Oriented-Administrative Role-Based Access Control model provides a comprehensive solution for MIS single-security domain or crossdomain resource access control. SDIACA main design goals are [1]: • To provide ideas for comprehensive application of SDO-ARBAC Model. • Taking a single SDO-ARBAC access control domain as a unit, to solve the access control problems of a single SDO-ARBAC access control domain in MIS. • For comprehensive SDO-ARBAC access contr