A cross-domain authorization access control model based on security label attribute

Abstract

This paper proposes a minimum diffusion and cross-domain security authorization strategy based on security label, which solves the security problems of minimum visible range and cross-domain authorization in access control mechanism. The strategy makes full use of security label attributes, introduces multi-level constraint mechanism in access control, and makes the scope of knowledge controllable in cross-domain authorization. Through the experimental validation of different security domain scenarios, compared with the traditional access control mechanism, the diffusion speed of sensitive files in the access control based on security label attributes is significantly reduced. If the number of security labels is set as Nlabel , and each label has Nscale values, the file diffusion speed of the network is only times that of the linear diffusion speed.