网格环境下的一种动态跨域访问控制策略  

A Dynamic Access Control Scheme Across Multi-Domains in Grid Environment

作　　者：陈颖[1] 杨寿保[1] 郭磊涛[1] 申凯[1] 

机构地区：[1]中国科学技术大学计算机科学技术系网络信息中心实验室,合肥230026

出　　处：《计算机研究与发展》2006年第11期1863-1869,共7页Journal of Computer Research and Development

基　　金：国家自然科学基金项目(60273041);国家"八六三"高技术研究发展计划基金项目(2002AA104560);CNGI2005基金项目(CNGI-04-15-7A)

摘　　要：针对网格环境下传统的基于角色的访问控制方式中资源共享的可扩放性和欺骗问题,提出了一种动态的访问控制方式.这种新型的访问控制方式可以根据用户的行为动态调整他的角色,在用户的权限与他的行为之间建立了联系.将该访问控制方式与信任模型结合,引入转换因子和动态角色的概念,应用到虚拟组织中,形成了基于动态角色的跨域访问控制系统.仿真结果显示,该系统能有效地实现访问控制,遏制欺骗,并具有良好的可扩放性.A new dynamic access control scheme, in which an entity＇s behavior and privilege can be dynamically and flexibly linked, is proposed to improve scalability and to restrain cheating of resource sharing in traditional role-based access control scheme in grid environment. This new scheme can adjust a user＇s role by his behavior, setting up relationship between a user＇s privilege and his behavior. Combining this access control scheme with a trust model, the concepts of converting parameter and dynamic role are introduced and applied to virtual organization （VO）, in which converting parameter is designed to realize the reputation conversion among multi-domains. Simulations show that the system can easily realize access control, restrict malicious behavior of entities, and improve the sealability.

关 键 词：网格 动态角色 跨域 访问控制 

分 类 号：TP393[自动化与计算机技术—计算机应用技术] TP316.4[自动化与计算机技术—计算机科学与技术]