Formalizing Evidence and Trust for User Authorization

该项目将开发授权机制，以便在开放的环境中由大量用户安全地获取信息。研究问题是形式化与每个用户相关联的信任，以授予对数据仓库和万维网的访问权限。证据被用来证明用户的某些属性，以建立信任模型。对证据进行了形式化处理，建立了证据可靠性计算模型。本研究结合了基于角色的访问控制、用户行为和配置文件、证据的数学理论和数据挖掘的概念。本文的研究工作有助于设计和开发一种信任增强型角色映射服务器，该服务器与现有的基于角色的访问控制机制协同工作，实现自适应授权。计划进行一系列实验来研究信任模型原型的性能问题。作为这些实验研究的结果，将开发出高效和自适应的角色分配算法。这项研究将为语义网、电子商务、机场安检程序、军事、国土安全和数据库访问等领域的情报收集和决策提供一个安全授权系统的框架。

This project will develop authorization mechanisms for secure information access by a large community of users in an open environment. The research problem is to formalize the trust that is associated with each user for granting privileges of access to data warehouse and the World Wide Web. Evidence is used to prove certain propertied of a user in order to build a trust model. Evidence is formalized and a computational model for the reliability of evidence is developed. This research combines the concepts of role-based access control, user behaviors and profiles, mathematical theory of evidence, and data mining. This research contributes to the design and develo0pment of a trust-enhanced role mapping server, For adaptive authorization, this server cooperates with existing role-based access control mechanisms. A series of experiments are planned to study the performance issues of the trust model prototype. Efficient and adaptive algorithms for role assignment will be developed as a result of these experimental studies. This research will provide a framework for secure authorization systems within applications in the semantic web, e-commerce, airport security procedures, intelligence gathering and policymaking in military, homeland security and database access in general.