一個針對家庭網路所設計的輕量級角色基礎存取控制機制

Abstract

隨著網際網路發展，資訊安全的問題浮上檯面，除了在一般區域網路需要防範的網路攻擊，家庭網路環境還需要考量到居家使用上的控管，例如對未成年家庭成員控制瀏覽電視頻道的規範。因此在數位家庭中，若僅授權使用者可使用資訊家電，資訊家電無法辨識不同使用者來改變使用設定，只能滿足基本的安全控管。 本論文將存取控制的概念納入家庭網路建置中，將以角色為基礎的存取控制(RBAC)簡化後，提出一套輕量級的以角色為基礎的存取控制(Light-weight RBAC, LRBAC)機制，除了原本RBAC以角色代替使用者的特點外，加上個人喜好設定以符合人性化家庭環境使用，其精簡的角色階層與角色限制除了符合家庭環境，亦方便家庭網路使用者管理。經過分析實驗結果後，證明本論文提出的LRBAC的確滿足適合家庭網路的存取控制需求。

Along with the Internet development, the information security issues are emerging. Except the network attack which needs to guard against in the general region network, the home network environment also needs to consider to the home use access control. For example, the control of the browsing television channel to the underage family member. Therefore, in digital home environment, server merely authorizes users to use the smart home appliances without identification of different users to adjust settings, just satisfy the basic requirement of security control. This thesis adopts the concept of access control and integrates it into home network establishment. We simplify Role-Based Access Control to fit the home network environment, and proposed the Light-weight Role-Based Access Control (LRBAC) mechanism. We not only reserve the basic role characteristic of RBAC, but also establish personal setting to the user-friendly home environment use. Its simplified role hierarchy and constraints conform to the home environment and facilitates the home network user to manage. After analysing the experimental result, we prove that LRBAC which the thesis proposed to be indeed satisfied the access control needs in home network environment.