计算机科学 ›› 2007, Vol. 34 ›› Issue (5): 111-114.

• 计算机网络与信息安全 • 上一篇    下一篇

基于属性的Web服务访问控制模型

傅鹤岗 李竞   

  1. 重庆大学计算机学院,重庆400030
  • 出版日期:2018-11-16 发布日期:2018-11-16

FU He-Gang, LI Jing (Computer College, Chongqing University, Chongqing 400030)   

  • Online:2018-11-16 Published:2018-11-16

摘要: 传统访问控制模型都是静态的、粗粒度的,不能很好地在面向服务的环境中应用。本文提出了一种基于属性的访问控制模型(ABAC),它结合 SAML(Security Assertion Markup Language,,安全声明标记语言)和XACML ( Extensible Access Control Markup Language,可扩展访问控制标记语言)标准,能够基于主体、客体和环境的属性来动态地、细粒度地进行授权。新的模型更加灵活,特别适用于动态的Web服务环境。

关键词: Web服务 访问控制 SAML XACML

Abstract: Traditional access control models are not well-suited for the services-oriented environments because they are mostly static and coarsely grained. An Attribute-based access control (ABAC) model is proposed based on SAML and XACML, which adopted the authori

Key words: Web services, Access control, SAML, XACML

No related articles found!
Viewed
Full text


Abstract

Cited

  Shared   
  Discussed   
No Suggested Reading articles found!