鉴别(authentication)访问控制(access control)数据保密(data confidentiality)数据完整性(data integrity)抗否认(non-reputation)