earticle

영어

The grid security affects directly the development of the grid and the practical application of grid system software. The access control is one of important contents of grid security research. The traditional access control models have ignored the subject security, and can not be solved with the dynamic grid, and the characteristics of the coexistence of multiple security strategy etc problems. Regarding expanded the concepts under the common network environment subject, the object, safe service, granularity control, the concept of subject/ object decomposition and the organization classifications are defined. Using the RBAC model and BLP the model basic principle, some of the new access control security strategy based on the grid environment has been defined in the paper. After discussion shows that the new rules emphasis on the subject security, and adapt to the dynamic nature of grid environment and characteristics of the coexistence of multiple security strategy. The new rules are compatibility with existing network access control model, they are secure and are also an expansion under the common network environment access control strategy, and this has certain positive significance to the grid security research.