Web服务中基于SAML和XACML的RBAC模型  

RBAC model based on SAML and XACML in web service

作　　者：杭园园[1] 钱雪忠[1] 

机构地区：[1]江南大学信息工程学院,江苏无锡214122

出　　处：《计算机工程与设计》2007年第2期328-329,421,共3页Computer Engineering and Design

基　　金：江苏省自然科学基金项目(bk20003017)

摘　　要：针对Web服务中安全性方面所存在的问题,引入角色来设定用户的访问策略,在用户访问具体资源时根据资源拥有者设置的权限来确定该用户的访问权限,使用角色作为行使权限的中介,通过SAML协议对该类角色实现单点登陆,并使用XACML对服务端的受保护资源进行访问控制。在此基础上给出了基于SAML和XACML的RBAC模型,该模型具有良好的灵活性、可扩展性及跨平台性。Combining the existed problems in the security of web service, the role is defmed to design the users＇ access policies. The users＇ access permission is designed in terms of the permissions which the resource owners have set when the users access the special resource. The policy use the role as the intermediary of exercising the authority, make the role single signed-on by SAML protocol and control the protected resources on web sites by XACML. Then the RBAC model based on SAML and XACML is given, the model improve the flexibility, extensibility and independence of the platform.

关 键 词：WEB服务 角色 访问控制 安全声明标记语言 可扩展访问控制标记语言 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]