关键词: 信息安全, 多域安全互操作, 跨域角色映射, 授权管理模型, 动态描述逻辑

Abstract: With regard to the singleness of the role establishment method in the traditional cross-domain authorization management models, and the problems such as implicit promotion of privilege and the separation of duties conflict, a new cross-domain authorization management model based on two-tier role mapping was proposed. The two-tier role architecture met the practical needs of role establishment and management. On this basis, unidirectional role mapping can avoid the role mapping rings. By introducing attribute and condition, dynamic adjustment of permissions was realized. The model was formalized by dynamic description logic, including concepts, relations and management actions. In the end, the security of the model was analyzed.

Key words: information security, multi-domain secure interoperation, cross-domain role mapping, authorization management model, dynamic description logic