一种基于角色代理的服务网格虚拟组织访问控制模型  

A Role-Based Delegation Access Control Model for Virtual Organization in Service Grid

作　　者：孙为群[1] 单保华[1] 张程[1] 刘晨[1] 

机构地区：[1]中国科学院计算技术研究所网格与服务计算中心

出　　处：《计算机学报》2006年第7期1199-1208,共10页Chinese Journal of Computers

基　　金：本课题得到国家自然科学基金(90412005)资助.

摘　　要：给出一种基于角色代理技术的虚拟组织访问控制模型,与同类研究成果相比,在不降低自治域的安全管理效率的情况下,能够实现虚拟组织的细粒度授权和确保自治域的安全策略不被破坏．该模型的一个原型系统已经实现,并通过一个基于网格的低成本电子政务平台中的实例进行了验证．In a service grid, the efficiency of security administration and security assurance of virtual organizations and autonomous domains are challenging issues. Access control is usually implemented through mapping virtual organization users to autonomous domain＇s local users, which reduces the efficiency of security administration and bears the risk of violating security policy of these domains applying RBAC model. A role-based delegation access control model for virtual organizations is proposed in the paper, which has little effect on security administration efficiency, and does not violate autonomous domain＇s security policy. It is implemented and validated in a grid-based e-Government platform.

关 键 词：服务网格 虚拟组织 访问控制 角色代理 策略 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]