CN102130904B - Blood relationship description system for entity trust in information system - Google Patents

Blood relationship description system for entity trust in information system Download PDF

Info

Publication number
CN102130904B
CN102130904B CN2011100226678A CN201110022667A CN102130904B CN 102130904 B CN102130904 B CN 102130904B CN 2011100226678 A CN2011100226678 A CN 2011100226678A CN 201110022667 A CN201110022667 A CN 201110022667A CN 102130904 B CN102130904 B CN 102130904B
Authority
CN
China
Prior art keywords
entity
genetic connection
information
tree
visitor
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Expired - Fee Related
Application number
CN2011100226678A
Other languages
Chinese (zh)
Other versions
CN102130904A (en
Inventor
董红斌
梁意文
万磊
王�锋
高科夫
傅军
吕林
宋世炜
艾勇
李涛
王景
刘长冬
刘奥林
郑尊
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Wuhan University WHU
Original Assignee
Wuhan University WHU
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Wuhan University WHU filed Critical Wuhan University WHU
Priority to CN2011100226678A priority Critical patent/CN102130904B/en
Publication of CN102130904A publication Critical patent/CN102130904A/en
Application granted granted Critical
Publication of CN102130904B publication Critical patent/CN102130904B/en
Expired - Fee Related legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Abstract

The invention relates to the technical field of information safety, and particularly relates to a blood relationship description system for entity trust in an information system. Aiming at the problems that at present, the entity relationship description mechanism is in lack, the entity relationship is converted to the entity trust because of the lack and the like, the inheriting relationship among entities in the information system is expressed by virtue of an idea of biological blood relationship and a blood relationship description method, and an entity trust evaluation system based on the inheriting relationship is established. In the system, the inheriting relationship among the entities is described by using a family tree, so that an evolution rule and an identification method for the inheriting relationship as well as a rule for converting the entity relationship into the entity trust are drawn up, a set of methods for describing the entity trust based on the entity inheriting relationship are established; the blood relationship description system for the entity trust in the information system designed according to the method can be applied in a network community, so that users in different relationships have different information access permissions; and the blood relationship description system can be applied in an enterprise information system, so that the safe share and protection of various resources can be achieved.

Description

The blood relationship descriptive system of entity trusts in information system
Technical field
The present invention relates to field of information security technology, relate in particular to the blood relationship descriptive system of entity trusts in a kind of information system.
Background technology
Information system is moved towards open, traditional security means by sealing and is lacked flexibility, can not satisfy the requirement of protection information safety under open environment.In recent years, when developing traditional safe practice, carried out the research of trusting in the computer.Give entity in information system with people's characteristic, measure, assess the trusting degree of inter-entity by the whole bag of tricks, for information system provides a kind of mechanism of security measure more flexibly.
In human society, interpersonal trust can be estimated in two ways, and the one, according to the calculating of rationality, the 2nd, related according to interpersonal emotion.At present, the condition of the trust foundation of research inter-entity mostly is the reputation of entity, contacts experience and the current residing environment of inter-entity, and estimates the trusting degree of inter-entity by comprehensive multiple condition.The mode that this evaluation inter-entity is trusted is similar to the mode of rational calculation in human society, and it is few to estimate the research and comparison of entity trusts based on the relation of inter-entity.Information system is open, and entity can be because participate in group or activity, and form various relations, with the factor that the relation that has formed is trusted as the judgement inter-entity, is the place that is worth research.
In human society, trust and play the part of very important status, be considered to the basic factor of stable society relation.In sociology, trust the reaction be considered to situation, be individual personal traits performance, be interpersonal relationships product, be the product of social system and cultural criterion.When trusting take interpersonal relationships as basic research, with interpersonal relationships carry out rationality calculate with according to the related trusting degree that decides of emotion.The Peng Si of Peking University has proposed clearly one " relation-trust model ", in order to the existing association that concerns between situation, interpersonal trust and relation running three to be described.
In information system, the entity in system can be regarded the people in society as, has initiative, and it can be an Agent, can be also one section program, and it has the advantages that to be similar to the people, can have mutual interchange, cooperation, can form various types of relations.Equally, can there be different trusting degrees in inter-entity, and the relation that inter-entity has formed will be also one of factor that affects the inter-entity trusting degree.
Yet, with the relation of the inter-entity condition as judgement inter-entity trusting degree, the research of this respect is also fewer, reason is, also there is no at present a kind of effective description mechanism, come the relation between entity in the descriptor system, this relation object is similar to interpersonal emotional relationship, and also lacks a kind of with the rule of relationship conversion for trusting.The purpose of this invention, the description mechanism of the middle inter-entity relation that just is to build up an information system is brought the relation of inter-entity into the factor of judgement inter-entity trusting degree, can investigate the situation that inter-entity is trusted from angle more fully.
In living nature, there is inheritance between biology, the distance of gene co-relation between the expression biology, in human society, genetic connection is by marriage or fertility and a kind of interpersonal relationships that produces, what interpersonal genetic connection represented is, the interpersonal inherent a kind of close and distant relation that produces due to heredity.In information system, inter-entity can be owing to exchanging, cooperating to form various types of relations.For example, entity participates in certain learned society, and forms the academic directive relationship of inter-entity, jointly completes and can have " colleague " relation between a certain work entity.This makes inter-entity can have the propagation that is similar to mankind's genetic connection.Yet, whether can be used for reference from the describing method of biological blood relationship and human society genetic connection, find for the method for describing the inter-entity propagation, be the emphasis that this invention needs research.
Find by analysis, there is following outstanding feature in the entity in information system:
(1) number of entities magnanimity: in information system, entity can be a user, an Agent or one section program, and obviously, in quantity, entity has magnanimity;
(2) relationship type diversity: the entity in information system can be regarded the people in society as, has initiative, can participate in various types of groups, activity, and inter-entity can exist interchange, cooperation, thereby forms various types of relations.The for example guidance of inter-entity and the relation that is instructed, " colleague " relation of inter-entity.
(3) concern dynamic change: in information system, the relation between entity is not that one deck is constant, and entity can form new relation owing to participating in new group, can due to the end of certain activity, make existing relation disappear.
In human society, people's quantity is also very huge, the genetic connection of describing between everyone is unpractical, but in a family, member's quantity is limited, feasible take family as the genetic connection between the unit description member, and mainly with the genetic connection between the formal description member of family tree.Member in family can form new family again by marriage or fertility after migrating to other places, form new family tree.When identifying two person-to-person genetic connections, can adopt the method for comparison family tree, search there are common ancestors in two people before how many generations, thereby determine the distance of genetic connection between two people.
Therefore, see on the whole, describe the propagation of inter-entity and the genetic connection of human society and have following similarity:
(1) quantity of entity and people's quantity is all very huge, be described the problem that all needs to solve quantity magnanimity to relation;
What (2) mankind's genetic connection represented is people's the source procedure that comes, formation be a hierarchical structure, the entity in information system also can form the relation with hierarchical structure due to the difference of identity, effect, these two kinds of hierarchical structures are similar;
(3) mankind's genetic connection represents is the distance, close and distant of human relationships, and in information system, the relation of describing inter-entity is also for the close and distant degree of inter-entity relation is described, for the trust of judgement inter-entity provides foundation;
(4) in human society, take family as the genetic connection between the unit record member, by comparing the interpersonal genetic connection of family tree judgement of different families, in information system, the relation that entity records is local relation, and the mode that also needs to be tested and appraised judges the close and distant degree of two inter-entity.
Therefore, by above-mentioned analysis as can be known, in information system, can use for reference the describing method of mankind's genetic connection, describe the relation of inter-entity, and this relation is called the genetic connection of entity, can judge the degree of inter-entity trust according to the genetic connection of entity.
Summary of the invention
Technical problem for above-mentioned existence, the blood relationship descriptive system that the purpose of this invention is to provide entity trusts in a kind of information system, use for reference the describing method of thought and the genetic connection of biological blood relationship, the propagation of inter-entity in the descriptor system provides foundation for judging intersubjective trusting degree.
For achieving the above object, the present invention adopts following technical scheme:
The genetic connection describing module is used for intersubjective genetic connection is described, and comprises storage, differentiation and evaluation work to genetic connection;
Trust computing module, be used for according to the various genetic connections that form between main body, and the computational methods that genetic connection are converted to the main body trusting degree, in order to judge intersubjective reliability rating; In this module, main body arranges the parameter of calculating trusting degree, according to parameter and intersubjective genetic connection, calculates the grade of trusting between main body;
The message reference module, be used for main body when information is issued, for information arranges access rights, make and only have the visitor who satisfies access rights can visit information, this module is by the implantation of access rule, the contents such as access rule are implanted in information, the visitor need to identify by authority when visit information, the access rights that the judgement visitor has, and according to access rights, show the content that the visitor can access.
The genetic connection describing module comprises that genetic connection sub module stored, genetic connection develop submodule, genetic connection is identified submodule;
Genetic connection sub module stored, main body genetic connection are logically showed with j-tree, and are adopted the XML form to store;
Genetic connection develops submodule, this submodule increases genetic connection operation, the operation of deletion genetic connection newly, and wherein increase genetic connection newly and operate by the newly-increased genetic connection of following dual mode: the genetic connection that both sides consult to add direct genetic connection and use for reference other main bodys is expanded the genetic connection of self;
Genetic connection is identified submodule, for the identification of the relation between two main bodys.
Described genetic connection identifies that when identifying genetic connection, there are following three kinds of situations in submodule:
When main body directly is present in the other side's j-tree, directly judge;
There is common body in the j-tree of two main bodys, judgement indirectly;
There is not common body in the j-tree of two main bodys, utilizes the third party to judge.
Trust computing module, when calculating intersubjective reliability rating, service regeulations parameter, all main bodys are all shared a parameter of regularity table, and with the form storage rule parameter of XML;
Trust computing module, be used for calculating the trusting degree between two main bodys, according between the residing trusted domain of trusting degree, the reliability rating of judgement main body.
In the message reference module, access rule is implanted as: the information publisher is before releasing news, the content of information is divided into some, then for each piece arranges access rule, need regulation in access rule, reach with the information publisher access rights that the visitor of which kind of reliability rating has;
In the message reference module, access rights are accredited as: the visitor need to first judge the access rights that block of information is had when visit information, then according to access rights, and the displaying of configuration information piece access.
In the process that access rights are identified, at first need according to the genetic connection between information publisher and visitor, the trusting degree of judgement publisher to the visitor determined residing reliability rating, then extract the watermark information of each piece in information, judge successively the authority that the visitor has; If the visitor has write permission, with the content displaying of block of information, and allow visitor's operation of modifying, if the visitor has read right, the content of an exhibition information piece, do not allow content is modified, if the visitor does not have access rights, the content of this block of information is hidden, the visitor can't see the content of this block of information.
The present invention has the following advantages and good effect:
The present invention can be applicable in Web Community, makes the user of different relations have different message reference authorities, is applied in enterprise information system, realizes that the safety of various resources is shared and protection, is with a wide range of applications.
Description of drawings
Fig. 1 is entity trusts genetic connection schematic diagram in information system provided by the invention.
Fig. 2 is j-tree dummy node organigram in the present invention.
Fig. 3 is that in the present invention, the entity genetic connection is run counter to the consistency schematic diagram.
Fig. 4 is that in the present invention, the entity genetic connection is run counter to the integrality schematic diagram.
Fig. 5 is that in the present invention, the entity j-tree adds the direct relation schematic diagram.
Fig. 6 is added to this entity j-tree schematic diagram with other j-tree relations in the present invention.
Fig. 7 is entity j-tree deletion of node schematic diagram in the present invention.
Fig. 8 is that in the present invention, the inter-entity relation directly judges schematic diagram.
Fig. 9 is inter-entity relation indirect judgement schematic diagram in the present invention.
Figure 10 utilizes third party entity judgement inter-entity to concern schematic diagram in the present invention.
Figure 11 is the entity j-tree schematic diagram that in the present invention, the BFS method produces.
Figure 12 is that in the present invention, the entity genetic connection is converted to the entity trusts schematic diagram.
Figure 13 is systematic functional structrue figure in the present invention.
Figure 14 is that in the present invention, main body is set up direct genetic connection schematic diagram.
Figure 15 is main body deletion genetic connection schematic diagram in the present invention.
Figure 16 is that in the present invention, genetic connection is identified schematic diagram.
Figure 17 is reliability rating judgement schematic diagram in the present invention.
Figure 18 is that in the present invention, access rights are identified schematic diagram.
Embodiment
The blood relationship descriptive system of entity trusts in information system provided by the invention is used for reference the thought of biological blood relationship and the describing method of genetic connection, the propagation of inter-entity in the descriptor system, and at first the below describes theoretical foundation of the present invention:
Entity genetic connection j-tree is described mechanism
In human society, adopt the genetic connection between the member in the formal description family of family tree, use for reference the method, in information system, set up the j-tree of inter-entity genetic connection and describe mechanism, the propagation of inter-entity is described.Need to consider following several situations:
(1) in human society, do not record the genetic connection between the whole mankind, but take family as unit record the genetic connection between a limited number of members.In information system, the quantity of entity has magnanimity, the genetic connection of describing all inter-entity is unpractical, also there is no need, because in most of the cases, each entity only need to be known the relation with the inter-entity of own hob-nob, and does not need to understand the situation that concerns with other all entities.Therefore, each entity only records the local genetic connection relevant to self.
(2) in human society, everyone only has a father, but a father can have a plurality of children, and the relation of this type can show clearly with one tree, and therefore, family tree tree structure commonly used represents.When the reference tree structure is described the genetic connection of inter-entity, this tree structure is referred to as j-tree.But in information system, an entity may have a plurality of direct higher level's entities, and for example, in an academic discussion group, a people may have a plurality of counselors.When representing with j-tree, adopt the method for dummy node, for having a plurality of fathers' Node configuration dummy node.
(3) in human society, interpersonal genetic connection has uniqueness, if be father and son's genetic connection between two people, just can not have other genetic connection between them so.In information system, there is the mode of multiple interchange, cooperation due to inter-entity, the relation that makes two inter-entity is not unique.When describing the inter-entity genetic connection with j-tree, every j-tree represents the relation of a type, and therefore, an entity may have many j-trees, is used for representing dissimilar relation.
Entity genetic connection evolution rules
In information system, the genetic connection of inter-entity is not that one deck is constant, can form new genetic connection in new activity or group owing to participating in, also can be due to the end of activity, and make original genetic connection disappear.Therefore the inter-entity genetic connection is to change, and when developing, observe two following rules:
(1) consistency of entity genetic connection: this rule is used for guaranteeing the genetic connection of inter-entity, and what represent in the j-tree of a plurality of entities is identical.For example, in the academician family tree of entity A, entity A is the counselor of entity B, and therefore, in the academician family tree of entity B, entity A must be also the counselor of entity B, if not, violated the consistency rule.
(2) integrality of entity genetic connection: the direct genetic connection that this kind integrality is used for recording between presentation-entity is complete.For example, in the academician family tree of entity A, entity B is the student that it directly instructs, and in the academician family tree of entity B, must record entity A is its direct counselor.
Due to the continuous contacts of inter-entity, entity can be used for reference the j-tree of other entities, self j-tree is expanded, so that j-tree is more perfect.Therefore, when the genetic connection of removing with certain entity, need notice other entity in the j-tree, remove the genetic connection of these two inter-entity.
Entity genetic connection authentication mechanism
Due to the just genetic connection of part of each entity record, when identifying whether inter-entity exists genetic connection, need to process following several situations:
(1) in the j-tree of two entities identifying, two entities appear in the j-tree of certain entity, perhaps appear at simultaneously in the j-tree of two entities, directly can judge the genetic connection of two entities.
(2) all there is no record and the other side's relation in the j-tree of two entities, but have a public entity, can be according to public entities, the genetic connection of two inter-entity of judgement.
Both there is no record and the other side's relation in the j-tree of (3) two entities, do not had public entity yet, and will look for the j-tree of other main bodys further to judge as bridge.
In above-mentioned several situations, the third situation is the most complicated, because How to choose is as other main bodys of bridge, it is more difficult making it possible to find as soon as possible the genetic connection of two inter-entity, what usually adopt is the method for selecting at random bridge main body, carries out BFS, but the degree of depth of search need to be set, still do not find the relation of inter-entity after reaching certain depth, think that these two inter-entity do not have genetic connection.
The entity trusts level calculating method
Build the genetic connection of inter-entity, purpose is for the trusting degree between computational entity.Due to trust and domain-specific, when genetic connection being converted to trust, need to formulate the rule of conversion.Transformation rule need to relate to the following aspects:
The not equity of (1) trusting: it is not symmetrical trusting, and the trusting degree of entity A to entity B might not be identical to the trusting degree of entity A with entity B.
(2) the genetic connection type is to the mapping mechanism of trusting: trust and domain-specific, each entity may have polytype genetic connection, therefore, needs to formulate mapping mechanism, when calculating the trust in certain field, how the genetic connection of respective type is changed.For example, entity A is the academic counselor of entity B, and entity B can be made as 1 to entity A at the trusting degree of sphere of learning, and entity A can be made as 0.8 to entity B at the trusting degree of sphere of learning.
(3) trust has transitivity: entity A is the academic counselor of entity B, and entity B is the academic counselor of entity C, in sphere of learning, can have the trusting relationship of sphere of learning between entity A and entity C.
The conversion of (4) trusting: due to trust and domain-specific, whether the trust between different field can be changed is the problem that has dispute always, for example, A trusts B in the ability of sphere of learning, but can not say at this point that A also trusts in the ability of culinary area B.It is considered herein that the conversion to trusting needs condition, if there is learned trust in A to B, there is trust in culinary art in B to C, exists so A to the trust of C in culinary area, but do not exist A to C the trust on sphere of learning.This character is called the end consistency of trusting conversion.
When genetic connection is converted to the inter-entity trusting degree, need to process following several situations:
(1) identify by genetic connection, the genetic connection between two entities belongs to the same type, namely can place it in same j-tree, can be according to entity the diverse location in j-tree, computational entity is at the trusting degree in this field.
Two main bodys exist in dissimilar j-tree, but exist public entity that they are associated, when calculating the trusting degree of such two inter-entity, need to utilize the end consistency rule of trusting conversion, at first need to judge the trusting relationship that whether has this field between main body, if exist, then calculate trusting degree.
The invention will be further described by reference to the accompanying drawings with specific embodiment for the below:
The present invention uses for reference the describing method of genetic connection in the thought of biological blood relationship and human society, the propagation of inter-entity in the descriptor system, and between computational entity based on the trusting degree of relation.
In information system, according to the schematic diagram of entity relationship computational entity trusting degree as shown in Figure 1.As can be seen from Figure 1, there are following characteristics in the entity in information system:
(1) each entity can have many j-trees, and every j-tree represents dissimilar genetic connection;
(2) two entities (shared document, discussion topic) when needs exchange will send mutual request to the other side, obtain corresponding mutual right according to the trusting degree between entity;
(3) when identifying the inter-entity trusting degree, first need to identify the genetic connection between entity, then according to the trusting degree between the genetic connection computational entity;
(4) entity after alternately, can propose to revise to the other side the request of j-tree, and can according to the other side's j-tree, revise the j-tree of self.
1. entity genetic connection j-tree is described mechanism
In information system, the j-tree of entity is used for describing the genetic connection of inter-entity, has following features:
(1) entity can have many j-trees, and every j-tree has different semantemes, dissimilar genetic connection between presentation-entity;
(2) in j-tree, each father node can have a plurality of child nodes, and each child nodes can only have a father node, if child has a plurality of father nodes, child nodes is invented a plurality of nodes.
J-tree is semantic
The semanteme of j-tree will meet the following conditions:
(1) semanteme of j-tree is take group that entity participates in or activity as foundation, for example, entity participates in the academic group of talking about, the j-tree that forms because of academic discussion between presentation-entity is called the academician family tree, participate in the activity of cooking learning, the j-tree of formation is called the culinary art j-tree;
(2) a plurality of entities participate in identical group or activity, and the j-tree title of each entity is identical, and therefore, the title of j-tree is named automatically by system, and entity can not be modified to the j-tree title.
When naming for j-tree, occur in the process into the entity set-up j-tree, j-tree constructive process code is as follows:
CreateFamilyTree (RName, Entity) //Rname concerns title, Entity is entity
{
The j-tree title of the current entity of // acquisition
TreeName?=?GetTreeName(Entity);
Whether the j-tree that // judgement this time creates is of the same name with existing j-tree
Result?=?judge(RName,TreeName);
// there is no j-tree of the same name, be the j-tree of this title of entity set-up
If?Result?=?0
{
// when creating initial j-tree, only have a node of this entity of expression in tree
CreateTreeStruct(RName,Entity);
}
}
In information system, the genetic connection that forms between entity is one-to-many always not, can have the situation of multi-to-multi.For example, in the group of academic discussion, an entity may have a plurality of entities that directly instruct.And in j-tree, a child node can only have at most a father node, therefore, when the genetic connection that adopts between the j-tree presentation-entity, adopt the virtual subnet nodal method.
In Fig. 2, in the academician family tree of entity C, entity C has two directly to instruct entity (entity A and entity B), the structure that consists of is as shown in the left figure in Fig. 2, this structure is not tree, therefore, increases a dummy node C ' in tree, with the father node of entity B as entity C ', as shown in the right figure in Fig. 2.
In Fig. 2, C and C ' are same entity, and the child node of entity C only need to be marked under entity C, and do not need mark in C '.
The establishment code of pseudo-entity is as follows:
VirtualEntityNode(Tree)
{
All nodes in // traversal Tree
While (node in node=Tree)
{
The father node quantity of // computing node
Count?=?ComputeFatherNode(node);
while?(count?>?1)
{
A limit between // deletion of node and father node
fathernode?=?DeleteEdge(node);
// dummy node is set, link the father node corresponding to limit of deletion
SetVirtualnode(node,fathernode);
Count?=?count?-?1;
}
}
}
2. entity genetic connection evolution rules
In information system, the genetic connection between entity is not that one deck is constant, can form new relation in new group owing to participating in, also can be due to certain group or movable end, and the relation that has formed is disappeared.When the entity genetic connection is developed, observe two following rules:
(1) consistency of entity genetic connection;
(2) integrality of entity genetic connection.
In information system, each entity can record the relation that forms with self contacts, and therefore, the relation that each entity records is not duplicate.Article one rule of formulating is used for guaranteeing that there is not conflict in the relation that each entity records, and the second rule is used for guaranteeing that each entity will record and all main bodys that direct relation is arranged self, can not have the situation of error of omission.
In Fig. 3, j-tree according to entity D, can learn, entity A is in entity D upper strata, illustrates that entity A is ancestors/superior relation of entity D, yet, in the j-tree of entity A, entity A is in the lower floor of entity D, has with relation that the j-tree of entity D is described and conflicts, and does not follow the consistency principle of entity genetic connection.
In Fig. 4, according to the j-tree of entity B, can know that entity B has an immediate superior entity A, two direct entity C of subordinate and D, and in the j-tree of entity C, entity C has an immediate superior entity E, two direct entity F of subordinate and entity G, obviously, in the j-tree of entity B, recorded the direct relation of entity B and entity C, but in the j-tree of entity C, but there is no the direct relation of record and entity B, violated entity genetic connection integrality principle.
Two rules that develop in order to satisfy above-mentioned entity genetic connection must add at the j-tree of entity or be guaranteed during deletion of node.
Add node
For the j-tree of entity adds node, dual mode is arranged:
(1) two entity adds the other side separately in j-tree as oneself direct node;
(2) entities are used for reference the relation that records in the j-tree of another entity, expand the j-tree of self;
For the first situation, entity A will with the immediate superior of entity B as self, need to send out the message asks entity B, if entity B is agreed, in the j-tree of entity A, with the immediate superior of entity B as entity A, in the j-tree of entity B, with the direct subordinate of entity A as entity B.Adding the operation of node in two entities must all will complete, otherwise, will run counter to consistency and the integrality of entity genetic connection.As shown in Figure 5.
The code that adds direct node is as follows:
AddDirectNode(EntityA,EntityB,Relationship)
{
The result of // acquisition request
Result?=?GetResult(EntityA,EntityB,Relationship);
If?(Result?!=0)
{
// entity B is added in the j-tree of entity A
AddNode(EntityA,EntityB,Relationship);
The situation of a plurality of father nodes of child node of // processing
VirtualEntityNode(Tree);
}
}
For the second situation, entity A with the communication process of entity B in, find that in the j-tree of entity B, has something to do is to be worth being familiar with, the relation that records in therefore can the j-tree with entity B is directly moved in the j-tree of entity A.As shown in Figure 6.
Deletion of node
Due to consistency and the integrity rule of entity genetic connection, make between the j-tree of each entity and have mutual association, for example, in the j-tree of entity A, entity B is its direct father node, and in the j-tree of entity B, necessarily comprising entity A is its direct child node.Therefore, during node in entity deletion self j-tree, can cause chain reaction, make in other nodes, delete the relation between corresponding node.
Deletion of node regular as follows:
(1) relation of entity proposition deletion must be direct relation;
(2) corresponding relation in other entity j-trees of the deletion of cascade;
In the deletion j-tree, the process of node is as follows:
(1) entity A proposes in the deletion j-tree direct relation with entity B;
(2) the every other entity that comprises in acquisition entity A j-tree;
(3) send message to other entities: the relation of A and B in the deletion j-tree;
(4) relation of deletion and entity B in j-tree, if B has child node, also deletion in the lump;
(5) after other entities obtain deleting message, carry out the action in the 2nd step to the 4th step, until deleted the relation of entity A and entity B in all related entities j-trees.
As can be known from Fig. 7, entity A is sent the request of the relation between deletion and entity B.Table 1 has been showed the process of deletion.
Table 1
Step Current processing entities Related entities Processing entities Pending entity
1 A B,C,D ? B,C,D
2 B A,D,E A C,D,E
3 C A,B A,B D,E
4 D B,E A,B,C E
5 E A,B A,B,C,D ?
6 ? ? A,B,C,D,E ?
3. entity genetic connection authentication mechanism
In the j-tree of each entity, only recorded the relation with other entities of part, during genetic connection between two entities of judgement, often can not directly find from the j-tree of certain entity.Because consistency and integrity rule are observed in the differentiation of entity genetic connection, and entity can be indiscriminately imitated the relation that records in other entity j-trees in the j-tree of oneself, therefore, when the genetic connection that judges between two entities, there are three kinds of following situations:
(1) directly judgement
During concerning between two entities of judgement, one therein, perhaps in the j-tree of two, recorded the relation between these two entities, can according to the position of two entities in j-tree, directly judge two genetic connections between entity.
In Fig. 8, if will judge the genetic connection of entity A and entity E, directly just can judge the relation that entity A is the upper two-stage of entity E from the j-tree of entity E.Because the consistency rule is observed in the differentiation of entity genetic connection, it is all correct making the relation that records in the j-tree of any entity, can not have contradiction.Although there is no record and the relation of entity E in the j-tree of entity A, need not suspect in the j-tree of entity E, whether that record and relation entity A are correct yet.
(2) judgement indirectly
When the genetic connection of two inter-entity of judgement, two entities are not present in the j-tree of certain entity simultaneously, but by analyzing the node in each side's j-tree, there is common node in discovery, can be according to common node, two j-trees are merged into a j-tree, thus according to the position judgment of two entities in j-tree the genetic connection between them.
When searching common node, the quantity of common node may be one, also may have a plurality ofly, gets the genetic connection that nearest relation represents two inter-entity.
In Fig. 9, can learn from the j-tree of entity D, entity D has two immediate superiors: entity B and entity F when representing with j-tree, represent with a virtual node.When the genetic connection of judgement entity A and entity D, in the j-tree of the j-tree of entity A and entity D, two common nodes are arranged: entity B and entity F.After two j-trees were merged, there are two kinds of genetic connections in entity A and entity D: by entity B, entity A was the secondary ancestors of entity D; By entity C and entity F, entity A is three grades of ancestors of entity D.In the present invention, choose nearest relation, therefore, entity A is the secondary ancestors of entity B.
(3) utilize the third party to judge
When the genetic connection that judges between two entities, if entity does not appear in the other side's j-tree, there is not public node in the j-tree of each side yet, need to utilize the j-tree of third party entity to judge.The present invention adopts the mode of BFS, successively the j-tree of the entity in j-tree is searched for, yet, owing to existing two inter-entity originally just there is no the situation of genetic connection, therefore, when utilizing the mode of BFS, the degree of depth of search is set, if also do not find the relation of inter-entity after reaching certain depth, think that these two inter-entity do not have genetic connection.If it is more reasonable that the degree of depth of search arranges, even if there is genetic connection, because the degree of depth of searching for finds not and not, the genetic connection of these two inter-entity also should be become estranged very much, and thinking of can being similar to do not have genetic connection.
Owing to existing by different intermediate entities, the genetic connection of two entities is got close to the phenomenon that degree varies causes, and when the mode that adopts search is searched the genetic connection of inter-entity, is as the criterion with the relation that finds at first.
In Figure 10, if will judge the genetic connection of entity A and entity D, when adopting BFS, process is as shown in table 2.
Table 2
Step Current entity Current relation Checked and verify body Associated entity
1 A A ? B,C
2 B A-B A C,E
3 C A-C A,B E,D
As can be seen from Table 2, by utilizing the j-tree of entity C, just can judge the genetic connection between entity A and entity D.But obviously, by utilizing the j-tree of entity B and entity E, can judge equally the relation between entity A and entity D, as shown in figure 11.Therefore, adopt different searching methods, perhaps search for different orders, may make result not identical.The present invention is as the criterion with the result that searches at first.
The algorithm of judgement entity relationship is as follows:
JudgeRelation(EntityA,EntityB)
{
NodeA?=?GetNode(EntityA);
If (EntityB is arranged in NodeA)
Obtain the relation with EntityB from the j-tree of EntityA;
Else
NodeB?=?GetNode(EntityB)
If (EntityA is arranged in NodeB)
Obtain the relation with EntityA from the j-tree of EntityB;
Else
If (NodeA with NodeB in identical node is arranged)
Obtain the relation of EntityA and EntityB by same node point;
Else
Depth?=?0;
While (taking out the entity EntityTemp that a node in NodeA represents)
{
If?(Depth++?>?10)
It doesn't matter for EntityA and EntityB, withdraws from
NodeTemp?=?GetNode(EntityTemp);
If (EntityB is arranged in NodeTemp)
Obtain the relation of EntityA and EntityB by EntityTemp,
Success
Else
NodeA?=?NodeA?+?NodeTemp
}
}
4. entity trusts level calculating method
During the trusting degree of inter-entity, need to consider the following features that trust has in the computing information system:
The asymmetry of (1) trusting;
The domain-specific of (2) trusting;
The transitivity of (3) trusting.
In information system, the genetic connection of inter-entity also has the characteristics of asymmetry, and for example, if entity A is the counselor of entity B, entity B is the student of entity A, so entity A is not equal to entity B to the relation of entity A to the relation of entity B.Be reflected in trust, can say, entity A to entity B learned trusting degree be not equal to entity B to entity A at learned trusting degree.
Entity has polytype genetic connection, and every kind of genetic connection all can have a j-tree corresponding with it, can distinguish the trust of different field between presentation-entity.For example, the academician family tree of entity can be in order to showing the trust of inter-entity sphere of learning, the culinary art j-tree of entity can presentation-entity between the trust of culinary area.Generally, the trust between different field can not be changed mutually, and therefore, not talkative entity A will exist entity A in the trust of culinary area to entity B in sphere of learning very trusted entities B.
The relation of the same domain of inter-entity has transitivity.Entity A is the counselor of entity B, and entity B is the counselor of entity C, can think, entity A is also the counselor of entity C.In entity trusts, in same field, if exist entity A to the trust of entity B, the trust of entity B to entity C also exists entity A to the trust of entity C, and just trusting degree may be different.
At present, in to the research of trusting, often the degree of belief spatial table is shown as the closed interval on 0 to 1,0 expression distrust fully, 1 expression is trusted fully.When the degree of belief space is divided, it can be divided into three grades, also it can be divided into Pyatyi.The present invention adopts following division methods:
Table 3
Between trusted domain Reliability rating
0 Distrust
(0,0.25] A bit trust
(025,0.5] General trust
(0.5,0.75] Trust very much
(075,0.1) Trust very much
1 Trust fully
When the present invention is converted to the degree of belief of inter-entity in the genetic connection with inter-entity, utilize following rule to change:
Rule 1: in same field, if between entity be set membership, the degree of belief of father's entity (EntityF) to fructification (EntityS): D (EntityF, EntityS)=d 1, the degree of belief of fructification to father's entity: D (EntityS, EntityF)=d 2, 0≤d wherein 1≤ d 2≤ 1.
The rule 2: in same field, two entities (entity 1:EntityS, entity 2:EntityT) by other N entity (Entity1, Entity2 ..., EntityN) be connected, and have
D(EntityS,Entity1)=d 1
D(Entity1,Entity2)=d 2
……
D(EntityN,EntityT)=d n+1
D (EntityS, EntityT)=K s n* d 1* d 2* ... * d n+1, 0<K wherein s≤ 1, K sBe called the same area transmission factor.
Rule 3: in different fields, observe the end consistency principle of trusting conversion during degree of belief between computational entity, if exist N entity (Entity1, Entity2 ..., EntityN), and have:
D domain1(Entity1,Entity2)=d 1
D domain2(Entity2,Entity3)=d 2
……
D domainn(EntityN-1,EntityN)=d n-1
Entity Entity1 and the degree of belief of entity EntityN in different field are:
D domain1(Entity1,EntityN)=0
D domain2(Entity1,EntityN)=0
……
D domainn(Entity1,EntityN)=?K d n-1×d 1×d 2×…×?d n-1
Domain1 wherein, domain2 ..., domainn represents different field 0<K d≤ 1, K dBe called foreign lands' transmission factor.
Rule 4: in the time can calculating degree of belief in several ways between entity, get maximum degree of belief as the degree of belief of inter-entity.
In Figure 12, comprised entity A and entity D at the j-tree of sphere of learning, and entity D is at the j-tree of culinary area.And make following regulation:
(1) in sphere of learning, fructification is 1 to the degree of belief of father's entity, and father's entity is 0.9 to the degree of belief of fructification;
(2) same area transmission factor K sBe 0.7, the transmission factor K of foreign lands dBe 0.5.
Have:
D science(A,E)?=K s 2×D science(A,B)×D science(B,D)×D science(D,E)
=(0.7) 2×0.9×0.9×0.9=0.36
D science(E,C)?=K s 3×D science(E,D)×D science(D,B)×D science(B,A)?×D science(A,C)
=(0.7) 3×1×1×1×0.9=0.31
D cooking(A,G)?=?K d×(K s×D science(A,B)×D science(B,D))×D cooking?(D,G)
=0.5×(0.7×0.9×0.9)×0.8=0.23
D science(G,A)?=0
By above-mentioned calculating as can be known:
In sphere of learning, entity A is 0.36 to the degree of belief of entity E, belongs to " general trust ", and entity E is 0.31 to the degree of belief of entity C, belongs to " general trust ";
In culinary area, entity A is 0.23 to the degree of belief of entity G, belong to " a bit trust ", but entity G is 0 to the degree of belief of entity A, belongs to " distrust ".
5. the blood relationship descriptive system of entity trusts in information system
In information system; the safety of protection information is the focus of research always; the present invention proposes the blood relationship descriptive system of entity trusts in information system; trusting degree between descriptor publisher and visitor is described with the blood relationship between main body by this system; and take trust as basis, the different access authority of granted access person to information.
(1) systematic functional structrue
This system divides according to function, can be divided into three parts: the describing module of genetic connection, trust computing module and message reference module.As shown in figure 13.
Genetic connection describing module: can be due to contacts, cooperation between main body, and form intersubjective propagation, be the genetic connection of main body, this module is used for intersubjective genetic connection is described, and comprises the work such as storage, differentiation and evaluation to genetic connection.
Trust computing module: according to the various genetic connections that form between main body, and the computational methods that genetic connection are converted to the main body trusting degree, in order to judge intersubjective reliability rating.In this module, main body can arrange the parameter of calculating trusting degree, according to parameter and intersubjective genetic connection, calculates the grade (distrust, a bit trust, generally trust, trust very much, trust very much and trust fully) of trusting between main body.
The message reference module: main body can arrange access rights for information when information is issued, and makes to only have the visitor who satisfies access rights can visit information.This module is implanted to the contents such as access rule in information by the implantation of access rule, and the visitor need to identify by authority when visit information, the access rights that the judgement visitor has, and according to access rights, show the content that the visitor can access.
(2) genetic connection describing module
This module is used for describing the genetic connection of main body, and relation is carried out maintenance and management.
A) storage of genetic connection
What the main body genetic connection was described is a hierarchical structure, can show with j-tree in logic, and adopt the XML form to store.
For the j-tree of the entity A in Figure 12, adopt the storage of XML form as follows:
<Lineage_Relationship>
<Title>Science</Title>
<Node>
<Name>A</Name>
<Node>
<Name>B</Name>
<Node>
<Name>D</Name>
</Node>
</Node>
<Node>
<Name>C</Name>
</Node>
</Node>
</Lienage_Relationship>
In above-mentioned XML, what " Title " represented is the semanteme of j-tree, shows it is the j-tree of a sphere of learning, and " Name " in each " Node " represents the title of node, that is to say the sign of main body.
B) differentiation of genetic connection
Main body is in the process of contacts, and the genetic connection of main body can change, and mainly contains dual mode: newly-increased relation and deletion relation.
Newly-increased genetic connection
Can increase genetic connection newly by dual mode: the genetic connection that both sides consult to add direct genetic connection and use for reference other main bodys is expanded the genetic connection of self.
The process that both sides consult to add genetic connection as shown in figure 14.
In Figure 14, if main body A will be set up direct genetic connection with main body B, only after entity B is agreed, can revise the genetic connection of self.For the genetic connection that guarantees two main bodys can both be modified, both sides need to do and repeatedly confirm operation.After A has revised the genetic connection of self, can to B " transmission receipt ", allow B also revise the genetic connection of self, if B does not receive receipt, just can " not send confirmation " yet, A can continue to B " transmission receipt ", after only receiving " send and confirm " of B, operation just finishes.
Main body also can be added the other side's genetic connection in the genetic connection of self in the process of contacts, and in Fig. 6, main body A is according to the j-tree of main body B, and self j-tree is expanded, and that is to say the XML genetic connection file of main body A is modified.
<Lineage_Relationship>
<Title>Science</Title>
<Node>
<Name>A</Name>
<Node>
<Name>F</Name>
<Node>
<Name>G</Name>
</Node>
<Node>
<Name>B</Name>
<Node>
<Name>D</Name>
</Node>
<Node>
<Name>E</Name>
</Node>
</Node>
</Node>
</Node>
</Lienage_Relationship>
In above-mentioned XML form, be the genetic connection that comes from main body B with the part of underscore.
The deletion genetic connection
The deletion of genetic connection must be observed two principles:
(1) can only apply for deleting and the relation that self is direct genetic connection;
(2) want corresponding genetic connection in other main bodys of deletion of cascade.
In Figure 15, showed the process of deletion genetic connection.Wherein, main body A application deletion genetic connection if be allowed to, after having deleted corresponding genetic connection, will send message to all related main bodys of main body A, be used for this relation of deletion.In Figure 15, main body A sends deletion message to main body B and main body C, and main body B and main body C first send deletion to main body A and confirm after the relation of having deleted, then to sending the message of this relation of deletion with self related main body.If main body A is after waiting for a period of time, do not receive that the deletion of main body B or main body C is confirmed, think that main body B or main body C do not receive the message of main body A, main body A sends deletion message to main body B or main body C again.This process is used for the deletion genetic connection of cascade.
C) evaluation of genetic connection
The genetic connection assessor is for the identification of the relation between two main bodys.Three kinds of situations are arranged when identifying genetic connection:
(1) main body directly is present in the other side's j-tree---directly judgement
There is common body in the j-tree of (2) two main bodys---judgement indirectly
There is not common body in the j-tree of (3) two main bodys---utilize the third party to judge
The workflow of genetic connection assessor as shown in figure 16.
According to the flow process that Figure 16 shows, directly the process of judgement and indirect judgement is all very simple, and the process of utilizing the third party to judge is comparatively complicated.When utilizing the third party to judge, use be breadth-first strategy, and the degree of depth of search need to be set, if surpass this degree of depth, still do not find intersubjective relation, thinking does not have genetic connection between this two main body.
(3) trust computing module
Trust computing module and be used for according to the genetic connection that exists between main body, utilize the trust computational methods of setting, quantitative description goes out intersubjective trusting degree.
A) parameter of regularity setting
In the entity trusts level calculating method of introducing in front, following several parameter need to be set:
D Domain(EntityA, EntityB)=d: the trusting degree to main body " EntityB " is " d " to main body " EntityA " in " domain " field, wherein 0≤d≤1;
K s: in same field, the transmission factor of trust, wherein 0<K s≤ 1;
K d: in different field, the transmission factor of trust, wherein 0<K d≤ 1;
When calculating intersubjective reliability rating, all to use these parameter of regularity, therefore, all main bodys are all shared a parameter of regularity table.In order to carry out read operation to parameter flexibly, with the form storage rule parameter of XML, form is as follows:
<Lineage_Parameters>
<Some_Domain>0.8</Some_Domain>
<Different_Domain>0.5</Different_Domain>
<Direct_Trust>
<Part>
<Name>Science</Name>
<Ancestor_Descendant>0.8</Ancestor_Descendant>
<Descendant_Ancestor>1</Descendant_Ancestor>
</Part>
<Part>
<Name>Cooking</Name>
<Ancestor_Descendant>0.9</Ancestor_Descendant>
<Descendant_Ancestor>1</Descendant_Ancestor>
</Part>
……
</Direct_Trust>
</Lienage_Parameters>
When representing parameter of regularity with the XML form, the trust transmission factor in the same field of " Some_Domain " expression, the trust transmission factor of " Different_Domain " expression different field, intersubjective direct trusting degree in " Direct_Trust " expression specific field, the title in " Name " expression field, the trusting degree of " Ancestor_Descendant " expression ancestors to direct offspring (higher level is to direct subordinate), the trusting degree of " Descendant_Ancestor " expression offspring to direct ancestors (subordinate is to immediate superior).In XML, ancestors in multiple specific field and the trusting degree between the offspring can be set.
B) reliability rating judgement
Trust judgement for the trusting degree that calculates between two main bodys, according between the residing trusted domain of trusting degree, the reliability rating (as shown in table 3) of judgement main body.
The deterministic process of reliability rating as shown in figure 17.
When the intersubjective reliability rating of judgement, at first, need to utilize the genetic connection assessor, identify and whether have genetic connection between two main bodys, if there is no genetic connection, directly be judged as " distrust ", otherwise, need two intersubjective relations of judgement to be present in which field, and then read the XML document of storage rule parameter, parse needed parameter, then according to the computational methods (rule 2 is to rule 4) of trusting degree, calculate intersubjective trusting degree, and the judgement present reliability rating of trusting degree (table 3).
(4) message reference module
This system is used for the safety of raising information, make and only have the visitor's ability Internet access information that reaches certain reliability rating with the information publisher, therefore, the publisher is before releasing news, need to access rule be set to information, then according to the trusting degree of publisher to the visitor, the corresponding authority of granted access person (reading and writing), last authority according to the visitor, the content of exhibition information.
A) access rule is implanted
The information publisher is before releasing news, the content of information can be divided into some (usually carrying out piecemeal take paragraph as unit), then for each piece, access rule is set, need regulation in access rule, reach with the information publisher access rights that the visitor of which kind of reliability rating has.With XML form memory access rule, as follows:
<Access_Rule>
<Creator>EntityA</Creator>
<Part>
<Trust_Degree>Very?Trust</Trust_Degree>
<Right>Write</Right>
</Part>
<Part>
<Trust_Degree>Little?Trust</Trust_Degree>
<Right>Read</Right>
</Part>
……
</Access_Rule>
When representing access rule with the XML form, the publisher of " Creator " expression information, piece to information can arrange multiple access rights, the grade that " Trust_Degree " expression is trusted, have five kinds: distrust (No Trust), a bit trust (Little Trust), general trust (General Trust), trust very much (Very Trust), very trust (Great Trust) and trust (Full Trust) fully, " Right " represents authority, has two kinds: read (Read) and write (Write).
When access rights were set, if be provided with the authority that a certain reliability rating has, the reliability rating higher than this reliability rating had this authority automatically.For example, if " trusting very much " has the authority of " writing ", so, " trusting very much " and " trusting fully " just has the authority of " writing ".
After rule arranges, will access rule be embedded in the piece of information with digital watermark technology.The characteristics of digital watermark technology are after information is embedded into digital carrier (document, picture, software etc.), do not affect the use value of original vector, also are not easy perceiveed or find by people's consciousness system.Can utilize the technology such as image watermark, audio frequency watermark, video watermark and Text Watermarking, access rule is embedded in various types of information.
B) access rights are identified
The visitor need to first judge the access rights that block of information is had when visit information, then according to access rights, and the displaying of configuration information piece access (write, read and hide), this flow process is as shown in figure 18.
In the process that access rights are identified, at first need according to the genetic connection between information publisher and visitor, the trusting degree of judgement publisher to the visitor, determine residing reliability rating, then extract the watermark information (access rule) of each piece in information, judge successively the authority (writing, read or do not allow to access) that the visitor has.If the visitor has write permission, with the content displaying of block of information, and allow visitor's operation of modifying, if the visitor has read right, the content of an exhibition information piece, do not allow content is modified, if the visitor does not have access rights, the content of this block of information is hidden, the visitor can't see the content of this block of information.
(5) application prospect
The blood relationship descriptive system of entity trusts in information system; can calculate intersubjective trusting degree according to the genetic connection between main body; and can be according to the access rule of trusting degree configuration information; making from the information publisher has the visitor of different relations to have different access rights; this kind information safety protection mode is comparatively flexible, can be applicable to multiple fields.
This system can be used for sharing of enterprises information.With the difference of employee because of position, and the hierarchical relationship that forms is as genetic connection, can be according to the trusting degree between this relation judgement employee.The employee is when releasing news, but the access rights of configuration information, and the information content that makes the employee of different relations to access is different, realizes sharing flexibly of enterprises information.
This system also can be used in Web Community, sets up the genetic connection between main body in Web Community, and judges intersubjective trusting degree, and main body is when releasing news, but the access rights of same configuration information, and the content that makes different main bodys to access is different.
Therefore, this system can be applied to multiple fields, has broad application prospects.
Above embodiment is only for explanation the present invention, but not limitation of the present invention, person skilled in the relevant technique; without departing from the spirit and scope of the present invention; can also make various conversion or modification, so all technical schemes that are equal to, all fall into protection scope of the present invention.

Claims (4)

1. the blood relationship descriptive system of entity trusts in an information system is characterized in that:
The genetic connection describing module is used for intersubjective genetic connection is described, and comprises storage, differentiation and evaluation work to genetic connection; The genetic connection describing module comprises that genetic connection sub module stored, genetic connection develop submodule, genetic connection is identified submodule;
Genetic connection sub module stored, main body genetic connection are logically showed with j-tree, and are adopted the XML form to store;
Genetic connection develops submodule, this submodule increases genetic connection operation, the operation of deletion genetic connection newly, and wherein increase genetic connection newly and operate by the newly-increased genetic connection of following dual mode: the genetic connection that both sides consult to add direct genetic connection and use for reference other main bodys is expanded the genetic connection of self;
Genetic connection is identified submodule, for the identification of the relation between two main bodys; Described genetic connection identifies that when identifying genetic connection, there are following three kinds of situations in submodule,
(1) directly be present in the other side's j-tree when main body, directly judgement;
(2) there is common body in the j-tree of two main bodys, judgement indirectly;
(3) there is not common body in the j-tree of two main bodys, utilizes the third party to judge;
Trust computing module, be used for according to the various genetic connections that form between main body, and the computational methods that genetic connection are converted to the main body trusting degree, in order to judge intersubjective reliability rating; In this module, main body arranges the parameter of calculating trusting degree, according to parameter and intersubjective genetic connection, calculates the grade of trusting between main body;
The message reference module, be used for main body when information is issued, for information arranges access rights, make and only have the visitor who satisfies access rights can visit information, this module is by the implantation of access rule, the contents such as access rule are implanted in information, the visitor need to identify by authority when visit information, the access rights that the judgement visitor has, and according to access rights, show the content that the visitor can access.
2. the blood relationship descriptive system of entity trusts in information system according to claim 1 is characterized in that:
Trust computing module, when calculating intersubjective reliability rating, service regeulations parameter, all main bodys are all shared a parameter of regularity table, and with the form storage rule parameter of XML;
Trust computing module, be used for calculating the trusting degree between two main bodys, according between the residing trusted domain of trusting degree, the reliability rating of judgement main body.
3. the blood relationship descriptive system of entity trusts in the information system described according to claim 1 and 2 is characterized in that:
In the message reference module, access rule is implanted as: the information publisher is before releasing news, the content of information is divided into some, then for each piece arranges access rule, need regulation in access rule, reach with the information publisher access rights that the visitor of which kind of reliability rating has;
In the message reference module, access rights are accredited as: the visitor need to first judge the access rights that block of information is had when visit information, then according to access rights, and the displaying of configuration information piece access.
4. the blood relationship descriptive system of entity trusts in information system according to claim 3 is characterized in that:
In the process that access rights are identified, at first need according to the genetic connection between information publisher and visitor, the trusting degree of judgement publisher to the visitor determined residing reliability rating, then extract the watermark information of each piece in information, judge successively the authority that the visitor has; If the visitor has write permission, with the content displaying of block of information, and allow visitor's operation of modifying, if the visitor has read right, the content of an exhibition information piece, do not allow content is modified, if the visitor does not have access rights, the content of this block of information is hidden, the visitor can't see the content of this block of information.
CN2011100226678A 2011-01-20 2011-01-20 Blood relationship description system for entity trust in information system Expired - Fee Related CN102130904B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN2011100226678A CN102130904B (en) 2011-01-20 2011-01-20 Blood relationship description system for entity trust in information system

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN2011100226678A CN102130904B (en) 2011-01-20 2011-01-20 Blood relationship description system for entity trust in information system

Publications (2)

Publication Number Publication Date
CN102130904A CN102130904A (en) 2011-07-20
CN102130904B true CN102130904B (en) 2013-06-19

Family

ID=44268794

Family Applications (1)

Application Number Title Priority Date Filing Date
CN2011100226678A Expired - Fee Related CN102130904B (en) 2011-01-20 2011-01-20 Blood relationship description system for entity trust in information system

Country Status (1)

Country Link
CN (1) CN102130904B (en)

Families Citing this family (12)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103544223A (en) * 2013-10-07 2014-01-29 宁波芝立软件有限公司 Method, system and equipment for storage and representation of basic affinity information
CN103544225A (en) * 2013-10-07 2014-01-29 宁波芝立软件有限公司 Foster relationship information storage representation method and system and equipment
CN103544222A (en) * 2013-10-07 2014-01-29 宁波芝立软件有限公司 General genetic relationship information storing and expressing method, system and device
CN104539687B (en) * 2014-12-19 2017-12-22 上海电机学院 Community cloud resource security sharing method based on trust negotiation
CN105812381B (en) * 2016-04-27 2019-01-25 华南师范大学 A kind of computer network security analysis and assessment method and system based on description logic
CN106412909B (en) * 2016-10-19 2019-09-27 广东欧珀移动通信有限公司 A kind of method and device of equipment connection
CN106599238A (en) * 2016-12-20 2017-04-26 樊磊 Transverse association family survey method and system
CN108256818A (en) * 2017-11-07 2018-07-06 平安科技(深圳)有限公司 Wages computational methods, application server and computer readable storage medium
CN107808015A (en) * 2017-11-23 2018-03-16 安徽云匠信息科技有限公司 A kind of family tree affiliation querying method and its device
CN109800595A (en) * 2018-12-26 2019-05-24 全球能源互联网研究院有限公司 A kind of electric power data sharing method and system
CN111666186B (en) * 2020-04-26 2023-09-15 杭州数梦工场科技有限公司 Method and device for detecting data access abnormality, storage medium and computer equipment
CN117273131B (en) * 2023-11-22 2024-02-13 四川三合力通科技发展集团有限公司 Cross-node data relationship discovery system and method

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1791118A (en) * 2005-12-26 2006-06-21 北京航空航天大学 Automated trust negotiation system and message processing method in gridding
CN1819587A (en) * 2006-03-10 2006-08-16 四川大学 Trusting method of network information system based on family genes
CN101167093A (en) * 2005-04-28 2008-04-23 康坦夹德控股股份有限公司 System and method for developing and using trusted policy based on a social model

Family Cites Families (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US8719304B2 (en) * 2004-05-28 2014-05-06 John Golze Systems, methods, and graphical tools for representing connectedness of individuals

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101167093A (en) * 2005-04-28 2008-04-23 康坦夹德控股股份有限公司 System and method for developing and using trusted policy based on a social model
CN1791118A (en) * 2005-12-26 2006-06-21 北京航空航天大学 Automated trust negotiation system and message processing method in gridding
CN1819587A (en) * 2006-03-10 2006-08-16 四川大学 Trusting method of network information system based on family genes

Also Published As

Publication number Publication date
CN102130904A (en) 2011-07-20

Similar Documents

Publication Publication Date Title
CN102130904B (en) Blood relationship description system for entity trust in information system
Feola et al. The diffusion of grassroots innovations for sustainability in Italy and G reat B ritain: An exploratory spatial data analysis
Krinsky et al. Social movements and social networks: Introduction
Ahajjam et al. A new scalable leader-community detection approach for community detection in social networks
Sampson et al. Ecological perspectives on the neighborhood context of urban poverty: Past and present
Verkuyten Ethnic attitudes among minority and majority children: The role of ethnic identification, peer group victimization and parents
Marzi et al. A three decade mixed-method bibliometric investigation of the IEEE transactions on engineering management
Toft Mobility closure in the upper class: Assessing time and forms of capital
Matus et al. Certification systems for machine learning: Lessons from sustainability
Gilbert Feminism and difference in urban geography
Yusriyah et al. Communication networks analysis on information dissemination of the moving of capital city from Jakarta to East Kalimantan
Salas-Fumás et al. Organisational structure and performance of consensus decisions through mutual influences: A computer simulation approach
McDONALD et al. The use of Johnson's Cultural Web to improve understanding of organisational culture: a critical review
Dai Application of regional culture in landscape architecture design under the background of data fusion
Cheatham et al. Application of social network analysis to collaborative team formation
Zhou et al. Dynamic analysis and simulation study of knowledge flow under the perspective of industrial transfer
CN107506473A (en) A kind of big data search method based on cloud computing
Singh et al. Reverse knowledge transfer: making sense of two decades of academic research
Havakhor et al. Knowledge sharing in peer-to-peer online communities: The effects of recommendation agents and community characteristics
McGranaghan et al. The need for a space data knowledge commons
Zulkarnain et al. Big Data Governance for Building A Smart Cities
Crossley et al. Social networks and social movements
Luo et al. Online knowledge community: conceptual clarification and a CAS view for its collective intelligence
Yang et al. Rough set and trust assessment-based potential paths analysis and mining for multimedia social networks
Huang et al. Research on the relationships of interactions in connectivist learning based on social network analysis

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C14 Grant of patent or utility model
GR01 Patent grant
CF01 Termination of patent right due to non-payment of annual fee

Granted publication date: 20130619

Termination date: 20160120

EXPY Termination of patent right or utility model