通信学报
通信學報
통신학보
JOURNAL OF CHINA INSTITUTE OF COMMUNICATIONS
2013年
9期
144-151
,共8页
董婵%范修斌%李有文%王建荣
董嬋%範脩斌%李有文%王建榮
동선%범수빈%리유문%왕건영
信息安全%BLP模型%常值赋值%条件修改赋值%全局解%条件解
信息安全%BLP模型%常值賦值%條件脩改賦值%全跼解%條件解
신식안전%BLP모형%상치부치%조건수개부치%전국해%조건해
information security%BLP model%constant valuation%condition modification valuation%global solution%con-dition solution
根据信息系统的主客体访问属性规律,给出了一种可行的BLP模型密级赋值方法,提出了2个归并条件。继而给出了归并后的BLP模型下的主客体密级赋值的数学模型。证明了当条件解是非常值赋值解时,其扩张还原解不一定是全局解的结果,但由该解可以得到全局解的近似条件修改赋值解。利用近似条件修改赋值解,给出了某国家级信息系统BLP模型的密级具体赋值,解决了应用中的实际困难问题。
根據信息繫統的主客體訪問屬性規律,給齣瞭一種可行的BLP模型密級賦值方法,提齣瞭2箇歸併條件。繼而給齣瞭歸併後的BLP模型下的主客體密級賦值的數學模型。證明瞭噹條件解是非常值賦值解時,其擴張還原解不一定是全跼解的結果,但由該解可以得到全跼解的近似條件脩改賦值解。利用近似條件脩改賦值解,給齣瞭某國傢級信息繫統BLP模型的密級具體賦值,解決瞭應用中的實際睏難問題。
근거신식계통적주객체방문속성규률,급출료일충가행적BLP모형밀급부치방법,제출료2개귀병조건。계이급출료귀병후적BLP모형하적주객체밀급부치적수학모형。증명료당조건해시비상치부치해시,기확장환원해불일정시전국해적결과,단유해해가이득도전국해적근사조건수개부치해。이용근사조건수개부치해,급출료모국가급신식계통BLP모형적밀급구체부치,해결료응용중적실제곤난문제。
According to the access attribute properties between subjects and objects in the information system, a viable method of the BLP model secret level valuation was given, and two merging conditions were put forward. The mathe-matical model of subject-object secret level valuation under BLP model was established on the two merging conditions. When the condition solution was not the constant one, its expansion solution being not sure the global one was proved, but the approximate condition modification valuation solution could be obtained from it. Using the above results, one dif-ficult problem from one national information system about the BLP model secret level valuation was solved.