Journal of Shanghai Jiao Tong University

Journal of Shanghai Jiaotong University ›› 2012, Vol. 46 ›› Issue (09): 1387-1391.

• Automation Technique, Computer Technology • Previous Articles     Next Articles

BLP Based Access Control Mechanism in Multi-level Network Systems

(1. School of Electronic, Information and Electrical Engineering, Shanghai Jiaotong University, Shanghai 200240, China; 2. Shanghai Key Laboratory of Information Security Synthesis Management Technique Research, Shanghai 200240, China; 3. Key Laboratory of InformationNetwork Security, Ministry of Public Security, Shanghai 201204, China)   

  • Received:2011-09-27 Online:2012-09-28 Published:2012-09-28

Abstract:  N-BLP model for network access control was proposed based on the traditional BLP model. The new model can control the communication behavior between subjects by defining network elements and constructing new states transition rules. Also, the security validation of the model was given using the finite state machine theory. Further, an N-BLP access control prototype system based on LSM architecture and TCP/IP protocol was implemented. The results show that this system can finegrainedly control the connection establishment and data flow transmission, and guarantee the security of information exchanging between multi-level network systems.  

Key words: network access control, BellLa Padula (BLP) model, reference monitor

CLC Number: