An Access Control Framework for Multilayer Rail Transit Systems Based on Trust and Sensitivity Attributes

Abstract

The construction of multilayer rail transit systems is a necessary way to realize “modern metropolitan areas on rail”, improve resource sharing, and increase travel services, where data integration is of utmost importance. To break data silos and realize data flow between different rail systems, a fine-grained access control framework is proposed in this paper. Through categorical and hierarchical schemes, a universal security scale is established for cross-domain data resources. Based on this, a trust and sensitivity attribute-based access control (TSABAC) model is put forward to describe the characteristics of the access control process. Furthermore, the method of policy integration is discussed, as well as the solution to the policy incompatibility problem, due to cross-domain interaction. As shown in practical application and simulation analysis, this framework can meet the requirements of security and granularity. This research is of great significance for promoting the high-quality development of urban agglomerations and metropolitan areas, and improving the quality and efficiency of rail transit.

On the Evaluation Framework of Comprehensive Trust for Data Interaction in Intermodal Transport

“…Some of related entities in subway and mainline railway are shown in Figure 5. In the subway system [21], the production management system (PMS) and production auxiliary systems (PAS) are regarded as the domain of subway operation business [22]. PAS has two significant information systems, i.e., passenger information system (PIS) and auto fare collection (AFC) system.…”