Research On BLP Access Control Model Based On TNC Architecture

With the rapid development of computer network and information technology, threats to network security have become more and more serious. It is very urgent to construct a credible network environment and ensure the credibility of data transmission and sharing after accessing. As one of the five network security services, access control plays an important role in solving network security problems. But there are some limitations in current access control models, which can’t meet the requirement of resource access control in trusted network environment.Firstly, the paper analyzed the mainly access control models and their advantages and disadvantages, combined the trusted network technology with the access control technology, and proposed an improved BLP model named TL-BLP based on trusted level to solve the BLP’s problems including the loss of integrity protection, static sensitive label and the neglect of user platform security. Secondly, a kind of noninterference model based on access operation was proposed to prove the security of improved model, which cannot be done in BLP security reasoning framework. Finally, an application scheme for access control system based on TL-BLP was designed, and also the main function modules, framework flow and its deployment were presented in detail.In this paper, access control condition based on trusted level was applied to BLP and users must obtain the corresponding authority by the constraint of platform, security level, and trusted level. As Trusted Network Connection technology was applied to obtain platform factors and trusted level of entities and platforms, the creditability of resource access control on TNC structure can be achieved in TL-BLP.