USB Device Access Control Policy Based on Attributebased  RBAC Mixed Extension

Journal of Information Security Reserach ›› 2025, Vol. 11 ›› Issue (12): 1146-.

USB Device Access Control Policy Based on Attributebased RBAC Mixed Extension

Wang Jianxin1, Liu Ang1, Liu Wen2, Xiao Chaoen3, Zhang Lei4, and Wang Zhiqiang5

1(Network and Information Management Division, Beijing Electronic Science and Technology Institute, Beijing 100070)
2(Department of Cryptologic Science and Technology, Beijing Electronic Science and Technology Institute, Beijing 100070)
3(Department of Electronic and Communication Engineering, Beijing Electronic Science and Technology Institute, Beijing 100070)
4(Academic Affairs Office, Beijing Electronic Science and Technology Institute, Beijing 100070)
5(Department of Cyberspace Security, Beijing Electronic Science and Technology Institute, Beijing 100070)

Online:2025-12-12 Published:2025-12-04

基于属性基RBAC混合扩展的USB设备访问控制策略

王建新1刘昂1刘雯2肖超恩3张磊4王志强5

1(北京电子科技学院网络信息化管理处北京100070)
2(北京电子科技学院密码科学与技术系北京100070)
3(北京电子科技学院电子与通信工程系北京100070)
4(北京电子科技学院教务处北京100070)
5(北京电子科技学院网络空间安全系北京100070)

通讯作者: 刘昂博士，工程师.主要研究方向为密码学、量子信息、区块链. liuang0826@163.com
作者简介:王建新博士，正高级工程师.主要研究方向为EDA技术、信息安全. wangjianxin@besti.edu.cn 刘昂博士，工程师.主要研究方向为密码学、量子信息、区块链. liuang0826@163.com 刘雯硕士，助理工程师.主要研究方向为网络空间安全治理. liuwen@besti.edu.cn 肖超恩博士，讲师.主要研究方向为嵌入式系统安全、智能软件和分布式计算. xce@besti.edu.cn 张磊博士，正高级工程师.主要研究方向为密码工程、芯片安全、网络空间安全. zhanglei@besti.edu.cn 王志强博士，副教授.主要研究方向为网络攻防、漏洞挖掘. wangzq@besti.edu.cn

基金资助:

中央高校基本科研业务费专项资金项目(3282024026，3282024009，20230051Z0114，20230050Z0114)；国家自然科学基金项目(61701008)

Abstract

Abstract: Aiming at the hot issue of USB (universal serial bus) device security defense, this paper explores access control methodologies. It proposes a mixed extention access control model of Attributebased RBAC (rolebased access control). Then based on the model, this paper designs and implements an access control system for USB device by combining authentication and control. This experiment verifies the feasibility of the model and its access control system. The results show that this system could solve the problems of coarsegrained and static allocation in traditional USB device access control.

Key words: USB device, mixed extension, access control, safety protection, role

摘要： 针对USB(universal serial bus)设备安全防护的热点问题，从访问控制层面探讨USB设备的安全防护措施，提出了属性基RBAC(rolebased access control)的混合扩展安全访问控制模型.基于该模型，通过采取认证和控制相结合方法，设计并实现了USB设备访问控制系统.实验验证了该模型及其访问控制系统的可行性，表明该系统可解决传统USB设备访问控制存在的粗粒度、静态分配等问题.

关键词: USB设备, 混合扩展, 访问控制, 安全防护, 角色

CLC Number:

```
TP309
```

王建新, 刘昂, 刘雯, 肖超恩, 张磊, 王志强, . 基于属性基RBAC混合扩展的USB设备访问控制策略[J]. 信息安全研究, 2025, 11(12): 1146-.

References

［1］刘亚丽. 电网工控系统安全防护中流量异常检测的研究与应用［D］. 沈阳: 中国科学院沈阳计算技术研究所, 2018［2］Kang M, Saiedian H. USBWall: A novel security mechanism to protect against maliciously reprogrammed USB devices［J］.  Information Security Journal: A Global Perspective, 2017, 26(4): 166185［3］Griscioli F, Pizzonia M, Sacchetti M. USBCheckIn: Preventing BadUSB attacks by forcing humandevice interaction［C］ Proc of the 14th Annual Conf on Privacy, Security and Trust (PST). Piscataway, NJ: IEEE, 2016: 493496［4］ 姜建国, 常子敬, 吕志强, 等. USB HID攻击与防护技术综述［J］.  信息安全研究, 2017, 3(2): 129138［5］张慧敏. USB存储设备安全机制的研究与实现［D］. 成都: 电子科技大学, 2016［6］Guri M, Monitz M, Elovici Y. USBee: Airgap covertchannel via electromagnetic emission from USB［C］ Proc of the 14th Annual Conf on Privacy, Security and Trust (PST). Piscataway, NJ: IEEE, 2016: 264268［7］吕志强, 刘喆, 常子敬, 等. 恶意USB设备攻击与防护技术研究［J］.  信息安全研究, 2016, 2(2): 150158［8］顾春华,高远,田秀霞. 安全性优化的RBAC访问控制模型［J］.  信息网络安全, 2017, 17(5): 7479［9］龚演, 吴庆波, 谭郁松. 基于Linux的USB存储设备访问控制机制研究［J］.  计算机技术与发展, 2012, 22(3): 15［10］龚演. 基于LSM框架的USB存储设备数据泄漏防护研究［D］. 长沙:国防科学技术大学, 2011［11］李永强, 谭立清, 马同茂,等. USB移动存储设备密级保护系统的设计与实现［J］.  计算机光盘软件与应用, 2014, 17(13): 8991［12］Kuhn R, Coyne E, Weil T. Adding attributes to rolebased access control［J］.  Computer, 2010, 43(6): 7981［13］曹进, 李培峰, 朱巧明, 等. 基于安全标签的多域安全访问控制模型［J］.  计算机应用与软件, 2015, 32(1): 297302［14］张文芳,董冠群,王小敏, 等. 基于多步动态信任评价的任务—角色基访问控制模型［J］.  计算机集成制造系统, 2018, 24(8): 19831995［15］石兴华, 曹金璇, 朱衍丞. 基于信任度的公安合成作战平台动态访问控制策略［J］.  计算机应用与软件, 2019, 36(8): 300305［16］熊厚仁, 陈性元, 费晓飞, 等. 基于属性和RBAC的混合扩展访问控制模型［J］.  计算机应用研究, 2016, 33(7): 21622169［17］Zhu Y, Huang D, Hu C J, et al. From RBAC to ABAC: Constructing flexible data access control for cloud storage services［J］.  IEEE Trans on Services Computing, 2014, 8(4): 601616［18］Hu V C, Kuhn D R, Ferraiolo D F, et al. Attributebased access control［J］.  Computer, 2015, 48(2): 8588［19］王小明, 付红, 张立臣. 基于属性的访问控制研究进展［J］.  电子学报, 2010, 38(7): 16601667［20］Ferraiolo D F, Sandhu R, Gavrila S, et al. Proposed NIST standard for rolebased access control［J］.  ACM Trans on Information and System Security, 2001, 4(3): 224274

[1]	. Multiaccess Controls for Defense Against Smart Contract Reentry Attacks [J]. Journal of Information Security Reserach, 2025, 11(4): 333-.
[2]	. Edge Cloud Collaborative Attributebased Signcryption Scheme Based on State Secret SM9 [J]. Journal of Information Security Reserach, 2025, 11(2): 115-.
[3]	. A Traceable Encryption Scheme for Medical Data Based on Smart Contract and Fog Computing [J]. Journal of Information Security Reserach, 2024, 10(6): 554-.
[4]	. Research on the Latticebased Access Control Encryption Technology [J]. Journal of Information Security Reserach, 2024, 10(4): 318-.
[5]	. Research on Zero Trust Access Control Model Based on Role and Attribute#br# #br# [J]. Journal of Information Security Reserach, 2024, 10(3): 241-.
[6]	. Research for Zero Trust Security Model [J]. Journal of Information Security Reserach, 2024, 10(10): 886-.
[7]	. Application of Behavior Anomaly Detection in Zero Trust Access #br# Control Method#br# [J]. Journal of Information Security Reserach, 2024, 10(10): 921-.
[8]	. A Blockchain Access Control Model for Grain Traceability Based on #br# Zerotrust Mechanism#br# [J]. Journal of Information Security Reserach, 2024, 10(10): 944-.
[9]	. Power Sensitive Data Access Control Method Based on Zero Trust Security Model [J]. Journal of Information Security Reserach, 2024, 10(1): 88-.
[10]	. Research and Application of 5G Private Network Access Security Management and Control Scheme Based on DNAAA [J]. Journal of Information Security Reserach, 2023, 9(8): 784-.
[11]	. Towards a Privacy-preserving Research for AI and Blockchain Integration [J]. Journal of Information Security Reserach, 2023, 9(6): 557-.
[12]	. Energy Data Sharing Access Control Model Based on Blockchain [J]. Journal of Information Security Reserach, 2023, 9(3): 220-.
[13]	. Research on Personal Privacy Data Sharing Technology Based on Blockchain Traceability [J]. Journal of Information Security Reserach, 2023, 9(2): 109-.
[14]	. Blockchainbased Data Element Resources Sharing and Access Control Scheme [J]. Journal of Information Security Reserach, 2023, 9(2): 137-.
[15]	. Research on Data Sharing Management Based on Attributebased Encryption#br# #br# [J]. Journal of Information Security Reserach, 2023, 9(11): 1061-.