基于SAML和XACML的Web服务访问控制模型  

Access control model for web services based on SAML and XACML

作　　者：姜炜超[1] 夏阳[1] 黄潇[1] 

机构地区：[1]中国矿业大学计算机科学与技术学院,江苏徐州221008

出　　处：《计算机工程与设计》2005年第6期1525-1528,共4页Computer Engineering and Design

摘　　要：Web服务采用了通用的协议和技术,便于用户访问,已成为了分布式计算的研究热点,但这种方便也带来了安全性的隐患。提出了一个基于SAML和XACML的Web服务访问控制模型,利用SAML协议实现单点登录,采用XACML策略描述语言对用户进行访问控制。模型在扩展SAML协议的基础上,把XACML引入Web服务能够更好地对服务端受保护资源进行控制,从而实现Web服务的安全访问控制。Web services, which adopt general protocol and technology, can be easily accessed by users and have been the research hotspot in distributed computing, but the downside of this easiness is that security is compromised. An access control system for web services is presented based on SAML and XACML, which uses SAML to single sign-on and introduces XACML to control the access of users. Based on SAML, XACML is imported to control the protected resources on web sites, and achieves the security of access control of web services.

关 键 词：WEB服务 SAML XACML 访问控制 策略 单点登录 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]