关键词: 时空约束, 强制访问控制, 多级安全

Abstract:

Traditional access control restrains unauthorized access only by logical method, which is vulnerable to suffer from address spoofing because of ignoring physical location. It can provide better security through introducing spatial information into access control. Security properties of objects are closely related to time in mandatory access control model. Therefore, the change of objects security property over time should be reflected in access control model. Based on classic Bell-Lapadula model (BLP), a mandatory access control model with temporal and spatial constraints is proposed, in which both time constraints and space constraints are considered. Compared to BLP model, the new model can provide better flexibility and security.

Key words: temporal and spatial constraints, mandatory access control, multi-level security