A zero trust method based on BLP and BIBA model

Zero trust is a novel type of access control security architecture that adopts the fundamental principle of “never trust, always verify”. The Bell-LaPadula and BIBA Model follow the access control principles of “no read up, no write down” and “no write up, no read down” to meet the confidentiality and integrity goals respectively. This paper aims to further expand the concepts of subject, object and security label in the Bell-LaPadula and BIBA Model, propose a novel zero trust method. This method performs comprehensive trust scores on system components such as users, terminals, channels, files and applications, and sets different weights for confidentiality and integrity requirements, thereby achieving better confidentiality and integrity protection for objects.