57 resultados para role-based access control
Resumo:
根据可信平台访问控制需求,提出一个可信平台属性分类规则,定义属性评估函数,可以实现可信平台数据安全分发和访问.同时针对XACML现有的策略合成算法不能有效满足可信平台自动方策略复合需求,设计了一个基于平台可信度的策略合成算法,该算法可以使策略的优先级和可信度保持一致,实现自动方策略复合.在此基础上,进一步对XACML实施扩展,形成可信平台策略语言框架TXACML(XACML based on trusted platform).采取TXACML对一个实例给出了策略描述和策略合成过程,验证了TXACML的有效性.
Resumo:
现阶段对操作系统的强制访问控制框架的正确性验证的研究主要集中于对授权钩子放置的验证.文中基于TrustedBSD MAC框架对强制访问控制框架的正确性验证问题进行了研究,在授权钩子放置验证的基础上,提出了安全标记的完全初始化验证和完全销毁验证.为了实现上述验证,文中提出了一个路径敏感的、基于用户自定义检查规则的静态分析方法.该方法通过对集成于编译器的静态分析工具mygcc进行扩展来验证强制访问控制框架的钩子放置的准确性和完备性.该方法具有完全的路径覆盖性,且具有低的误报率和时间开销.
Resumo:
为解决LSM在策略重用和策略共存方面存在的问题,提出了一个新的安全体系结构ELSM,它引入一个模型组合器作为主模块实施模块堆栈管理和模块决策管理,其中模块决策的实施采用了访问控制空间的策略规范方法,可支持通用性,ELSM的设计及其在安胜OS安全操作系统中的实例分析表明其有效性。
Resumo:
当前的Web服务发现机制大多依赖集中式的统一描述、发现和集成注册中心,但组织机构出于安全和地域的考虑,倾向于构建私有的分布式注册中心,只有注册且可信的请求者才能浏览到他们有权限访问的服务信息。该文给出Web服务发现阶段基于角色的访问控制模型RBAC4WSD,发现代理依照服务提供者指定的安全策略对请求者实施访问控制,并以跨国公司内部的文档服务为例介绍原型系统的实现。
Resumo:
门禁系统主要负责对出入通道进行管制,是社区楼宇安全监控系统的一部分。传统的门禁系统通常采用密码识别、卡片识别的方式进行验证,由于密码、卡片容易被盗用、丢失,系统安全性不高。在通信方式上传统门禁系统通常采用RS485或者RS232连接,传输距离、速度和连接终端数均受限制。本文提出的人像识别门禁系统解决方案采用ARM-Linux系统平台,依靠社区宽带综合业务网的传输和存储能力,结合密码、RFID和人像识别三种识别方式,利用网络技术和生物识别技术达到识别率高、响应速度快、扩展能力强的要求,并能够与驻地网的其它业务集成,提供业务级的联动服务。此外,该门禁系统还支持用户使用电话开门,由服务器完成对用户来电的识别和防伪验证。本文工作的主要贡献是:参与了ARM-Linux系统的裁剪、移植和声卡驱动的修改;建立了ARM-Linux交叉编译环境;完成了门禁前端软件系统的整体设计和实现;完成了服务器软件电话呼叫响应子系统的设计。
Resumo:
River is a major component of the global surface water and CO2 cycles. The chemistry of river waters reveals the nature of weathering on a basin-wide scale and helps us understand the exogenic cycles of elements in the continent-river-ocean system. In particular, geochemical investigation of large river gives important information on the biogeochemical cycles of the elements, chemical weathering rates, physical erosion rates and CO2 consumption during the weathering of the rocks within the drainage basin. Its importance has led to a number of detailed geochemical studies on some of the world's large and medium-size river systems. Flowing in the south of China, the Xijiang River is the second largest river in the China with respect to its discharge, after the Yangtze River. Its headwaters drain the YunGui Plateau, where altitude is approximately 2000 meters. Geologically, the carbonate rocks are widely spread in the river drainage basin, which covers an area of about 0.17xl06 km2, i.e., 39% of the whole drainage basin. This study focuses on the chemistry of the Xijiang river system and constitutes the first geochemical investigation into major and trace elements concentrations for both suspended and dissolved loads of this river and its main tributaries, and Sr isotopic composition of the dissolved load is also investigated, in order to determine both chemical weathering and mechanical erosion rates. As compared with the other large rivers of the world, the Xijiang River is characterized by higher major element concentration. The dissolved major cations average 1.17, 0.33, 0.15, and 0.04 mmol I"1 for Ca, Mg, Na, and K, respectively. The total cation concentrations (TZ+) in these rivers vary between 2.2 and 4.4 meq I'1. The high concentration of Ca and Mg, high (Ca+Mg)/(Na+K) ratio (7.9), enormous alkalinity and low dissolved SiO2/HCO3 ratio (0.05) in river waters reveal the importance of carbonate weathering and relatively weak silicate weathering over the river drainage basin. The major elements in river water, such as the alkalis and alkaline-earths, are of different origins: from rain water, silicate weathering, carbonate and evaporite weathering. A mixing model based on mass budget equation is used in this study, which allows the proportions of each element derived from the different source to be calculated. The carbonate weathering is the main source of these elements in the Xijiang drainage basin. The contribution of rainwater, especially for Na, reaches to approximately 50% in some tributaries. Dissolved elemental concentration of the river waters are corrected for rain inputs (mainly oceanic salts), the elemental concentrations derived from the different rock weathering are calculated. As a consequence, silicate, carbonate and total rock weathering rates, together with the consumption rates of atmospheric CO2 by weathering of each of these lithologies have been estimated. They provide specific chemical erosion rates varying between 5.1~17.8 t/km2/yr for silicate, 95.5~157.2 t/km2/yr for carbonate, and 100.6-169.1 t/km2/yr for total rock, respectively. CO2 consumptions by silicate and carbonate weathering approach 13><109and 270.5x10 mol/yr. Mechanical denudation rates deduced from the multi-year average of suspended load concentrations range from 92-874 t/km2/yr. The high denudation rates are mainly attributable to high relief and heavy rainfall, and acid rain is very frequent in the drainage basin, may exceed 50% and the pH value of rainwater may be <4.0, result from SO2 pollution in the atmosphere, results in the dissolution of carbonates and aluminosilicates and hence accelerates the chemical erosion rate. The compositions of minerals and elements of suspended particulate matter are also investigated. The most soluble elements (e.g. Ca, Na, Sr, Mg) are strongly depleted in the suspended phase with respect to upper continent crust, which reflects the high intensity of rock weathering in the drainage basin. Some elements (e.g. Pb, Cu, Co, Cr) show positive anomalies, Pb/Th ratios in suspended matter approach 7 times (Liu Jiang) to 10 times (Nanpan Jiang) the crustal value. The enrichment of these elements in suspended matter reflects the intensity both of anthropogenic pollution and adsorption processes onto particles. The contents of the soluble fraction of rare earth elements (REE) in the river are low, and REE mainly reside in particulate phase. In dissolved phase, the PAAS-normalized distribution patterns show significant HREE enrichment with (La/Yb) SN=0.26~0.94 and Ce depletion with (Ce/Ce*) SN=0.31-0.98, and the most pronounced negative Ce anomalies occur in rivers of high pH. In the suspended phase, the rivers have LREE-enriched patterns relative to PAAS, with (La/Yb) SN=1 -00-1 .40. The results suggest that pH is a major factor controlling both the absolute abundances of REE in solution and the fractionation of REE of dissolved phase. Ce depletion in river waters with high pH values results probably from both preferential removal of Ce onto Fe-Mn oxide coating of particles and CeC^ sedimentation. This process is known to occur in the marine environment and may also occur in high pH rivers. Positive correlations are also observed between La/Yb ratio and DOC, HCO3", PO4", suggesting that colloids and (or) adsorption processes play an important role in the control of these elements.
Resumo:
基于啁啾脉冲放大技术的超短脉冲激光系统是提供超快、超强激光的重要途径,具有良好输出波形和高损伤阈值的多层介质膜脉冲宽度压缩光栅是获得高峰值功率脉冲激光的关键。基于傅里叶谱变换方法和严格模式理论,分析了多层介质膜光栅(MDG)在超短脉冲作用下的光学特性。结果表明,当MDG的反射带宽小于具有高斯分布的入射脉冲的频谱宽度时,-1级反射脉冲呈非对称高斯分布,其前沿出现振荡,并且-1级反射脉冲能量开始剧烈下降,讨论了MDG结构参数对其反射带宽的影响。分析了MDG与超短脉冲作用时的近场光分布,对提高其抗激光损伤特性具
Resumo:
A novel 28-amino acid peptide, termed bombinakinin-GAP, was purified and characterized from skin secretions of the toad Bombina maxima. Its primary structure was established as DMYEIKQYKTAHGRPPICAPGEQCPIWV-NH2, in which two cysteines form a disulfide bond. A FASTA search of SWISS-PROT databank detected a 32% sequence identity between the sequences of the peptide and a segment of rat cocaine- and amphetamine-regulated transcript (CART). Intracerebroventricular (i.c.v.) administration of the peptide induced a significant decrease in food intake in rats, suggesting that it played a role in the control of feeding by brain. Analysis of its cDNA structure revealed that this peptide is coexpressed with bombinakinin M, a bradykinin-related peptide from the same toad. Bombinakinin-GAP appears to be the first example of a novel class of bioactive peptides from amphibian skin, which may be implicated in feeding behavior. (C) 2003 Elsevier Science Inc. All rights reserved.
Resumo:
Sertoli cells play a central role in the control and maintenance of spermatogenesis. Isolated Sertoli cells of mouse and rat testes have been shown to secrete plasminogen activator (PA) and a plasminogen activator inhibitor type-1 (PAI-1) in culture. In this study, we have investigated the hormonal regulation of PA and PAI-1 activities in cultured monkey Sertoli cells. Sertoli cells (5x10(5) cells/well) isolated from infant rhesus monkey testes were preincubated at 35 degrees C for 16 h in 24-well plates precoated with poly(D-lysine) (5 mu g/cm(2)) in 0.5 mi McCoy's 5a medium containing 5% of fetal calf serum and further incubated for 48 h in 0.5 mi serum-free medium with or without various hormones or other compounds, PA as well as PAI-1 activities in the conditioned media were assayed by fibrin overlay and reverse fibrin autography techniques respectively. The Sertoli cells in vitro secreted only tissue-type PA (tPA), no detectable amount of urokinase-type PA (uPA) could be observed, Monkey Sertoli cells were also capable of secreting PAI-1, Immunocytochemical studies indicated that both tPA and PAI-1 positive staining localized in the Sertoli cells, spermatids and residual bodies of the seminiferous epithelium; Northern blot analysis further confirmed the presence of both tPA and PAI-1 mRNA in monkey Sertoli cells. Addition of follicle-stimulating hormone (FSH) or cyclic adenosine monophosphate (cAMP) derivatives or cAMP-generating agents and gonadotrophin-releasing hormone (GnRH) agonist or phorbol ester (PMA) to the cell culture significantly increased tPA activity. PAI-1 activity in the culture was also enhanced by these reagents except 8-bromo-dibutyryl-cAMP, forskolin and 3-isobutyl-1-methylxanthin (MIX) which greatly stimulated tPA activity, whereas decreased PAI-1 activity, implying that neutralization of PAI-1 activity by tile high level of tPA in the conditioned media may occur. These data suggest that increased intracellular signals which activate protein kinase A (PKA), or protein kinase C (PKC) can modulate Sertoli cell tPA and PAI-1 activities, The concomitant induction of PA and PAI-1 by the same reagents in the Sertoli cells may reflect a finely tuned regulatory mechanism in which PAI-1 could limit the excession of the proteolysis.
Resumo:
The heme-regulated initiation factor 2 alpha kinase (HRI) is acknowledged to play an important role in translational shutoff in reticulocytes in response to various cellular stresses. In this study, we report its homologous cDNA cloning and characterization from cultured flounder embryonic cells (FEC) after treatment with UV-inactivated grass carp haemorrhagic virus (GCHV). The full-length cDNA of Paralichthys olivaceus HRI homologue (PoHRI) has 2391 bp and encodes a protein of 651 amino acids. The putative PoHRI protein exhibits high identity with all members of eIF2 alpha kinase family. It contains 12 catalytic subdomains located within the C-terminus of all Ser/Thr protein kinases, a unique kinase insertion of 136 amino acids between subdomains IV and V, and a relatively conserved N-terminal domain (NTD). Upon heat shock, virus infection or Poly PC treatment, PoHRI mRNA and protein are significantly upregulated in FEC cells but show different expression patterns in response to different stresses. In healthy flounders, PoHRI displays a wide tissue distribution at both the mRNA and protein levels. These results indicate that PoHRI is a ubiquitous eIF2a kinase and might play an important role in translational control over nonheme producing FEC cells under different stresses. (c) 2006 Elsevier Ltd. All rights reserved.
Resumo:
Charge trapping in the fluorinated SIMOX buried oxides before and after ionizing radiation has been investigated by means of C-V characteristics. Radiation-induced positive charge trapping which results in negative shift of C-V curves can be restrained by implanting fluorine ions into the SIMOX buried oxides. Pre-radiation charge trapping is suppressed in the fluorinated buried oxides. The fluorine dose and post-implantation anneal time play a very important role in the control of charge trapping.
Resumo:
在军事和商业领域中,由多个自治域形成的协作群体对共有资源(如客体、应用程序以及服务等)的访问问题越来越受到重视.协作中的基本事实是:尽管这些自治域有共同的目标,但同时有不同的自身利益.为了有效地保护共有资源,把“信任”的概念引入了协作访问控制中,并在基于量化权限的思想上,提出了细粒度的协作访问控制策略.在该策略里,权限的使用形式是元权限,也就是单位权限,它是访问共有客体权限的一个划分,可为多个域中不同用户所拥有.当访问共有资源时,参与者们所拥有的元权限的值之和以及人数必须达到规定的权限门限值和人数值,并且访问时间是所有参与者的共同许可访问时间段,这使得可以对协作资源进行有效地分布控制.另外,还引入了元权限的使用时间段约束.最后,证明了该细粒度协作访问控制策略关于协作系统的状态转换是保持安全的.
Resumo:
XML文档存放的信息需要受到访问控制策略的保护.现有的一些面向XML文档的访问控制模型都是基于自主访问控制策略或基于角色的访问控制.高安全等级系统需要强制访问控制来保证系统内信息的安全.首先扩展了XML文档模型使其包含标签信息,并给出了扩展后的文档模型需要满足的规则.然后通过讨论XML文档上的4种操作,描述了面向XML文档的细粒度强制访问控制模型的详细内容.该模型基于XML模式技术,它的控制粒度可以达到文档中的元素或者属性.最后讨论了该模型的体系结构和一些实现机制。