关键词: 云平台, 数据安全, 访问控制模型, 数据分类分级, 安全标签, RBAC

Abstract: The education cloud platform is one of the key infrastructures for education digitization construction. It unifies business data from different departments and organizations to eliminate information silos and reduce the redundant construction of information systems. However, although the education cloud platform realizes data sharing, it also seriously influences the security of data resources because of its open and dynamic characteristics. Considering the data management and control of the education cloud platform, this paper proposes an access control model based on data classification and grading system. The model comprehensively considers the security factors such as data class, security grade, life cycle and sensitive level, and tags the data from multidimension views. The secure tag is integrated with the rolebased access control policy to construct a twostage authorization model of coarsegrained filtering and finegrained control for managing data. The prototype system proves that the proposed model can restrict data sharing and prevent users from overprivileged manipulation.Key wordscloud platform; data security; access control model; data classification and grading; secure tag; RBAC

Key words: cloud platform, data security, access control model, data classification and grading, secure tag, RBAC