Trusted PKI based Conflicts Resolution for Multi-domain Access Control

Abstract

In order to meet the requirements of cross-domain resource access under the premise of ensuring the security of multi-domain systems, it is necessary to take into account the security and usability of cross-domain resource access when eliminating the conflict of access control policies. This paper proposes a method of conflict resolution based on trusted PKI authorization. Firstly, the conflict resolution method based on trusted PKI authorization adopts the trustworthiness evaluation method to take a threat assessment of the users and operations involved in the conflict rule. Secondly, eliminate the conflict threats through the termination of domain role mapping and revoking access authorization, while adopting PKI authentication to ensure trusted cross-domain access to continue. Compared with the general conflict resolution method, the trusted PKI authorization based method takes full account of the contribution of inter-domain trust to security and the user's demand for cross-domain resource access.