TCloud：云计算中跨域访问控制的动态框架与策略
TCloud: A Dynamic Framework and Policies for Access Control across Multiple Domains in Cloud Computing
摘要：
在云计算环境中，访问控制策略是保障云用户和云资源服务安全的有效手段。在分析当前云计算安全特性的基础上，引入信任的概念，提出基于角色的访问控制策略，并结合云计算环境存在多个安全管理域的特点，提出了一种新的基于信任的跨域访问控制框架。它将建立和计算单个域和多个域中的信任度。基于角色的访问控制引入了信任的概念，用于实现单域环境下的访问控制策略。在多个域中，访问控制将基于角色的转换。在信任和基于角色的访问控制模型的基础上，提出了一种新的灵活的跨域访问控制框架。角色分配和转换将动态发生。
英文摘要：
In a cloud computing environment, access control policy is an effective means of fortification cloud users and cloud resources services against security infringements. Based on analysis of current cloud computing security characteristics, the preamble of the concept of trust, role-based access control policy, combined with the characteristics of the cloud computing environment, there are multiple security management domains, so a new cross domain framework is for access control is proposed which is based on trust. It will establish and calculate the degree of trust in the single as well as multiple domains. Role Based Access Control is used for the implementation of the access control policies in a single domain environment with the introduction of the trust concept. In multiple domains the access control will be based on the conversion of roles. On the basis of trust, and role based access control model, a new novel framework of flexible cross domain access control framework is presented. The role assignment and conversion will take place dynamically.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
