S. V. Belim, S. Yu. Belim
The possibility of use the keys preliminary distribution KDP-scheme for mandatory access control realization in the distributed systems with user's hierarchy is considered. The modified keys preliminary distribution algorithm is suggested. It is developed a method for creation of subsets family for solution this task.
S. V. Belim, S. Yu. Belim
In article the modification of the Blom's keys preliminary distribution scheme, considering the direction of information streams is suggested. For this modification it is necessary to use function from three variables. Function of formation of key materials will be the asymmetrical. The exponential form of this function which does not increase the volume of key materials is suggested.
S. V. Belim, S. Yu. Belim, N. F. Bogachenko et al.
The problem of optimal authorization of a user in a system with a role-based access control policy is considered. The main criterion is to minimize the risks of permission leakage. The choice of the role for authorization is based on the analytic hierarchy process. The substantiation of a choice of criteria for formation of a hierarchy of the first level is given. An algorithm for calculating weight coefficients is presented, based on the quantitative characteristics of the role graph and not dependent on subjective expert evaluations. The complexity is estimated and the scalability of the proposed algorithm is discussed.