基于属性的Web服务访问控制模型  

Attribute-based Access Control Model for Web Services

作　　者：傅鹤岗[1] 李竞[1] 

机构地区：[1]重庆大学计算机学院,重庆400030

出　　处：《计算机科学》2007年第5期111-114,共4页Computer Science

摘　　要：传统访问控制模型都是静态的、粗粒度的,不能很好地在面向服务的环境中应用。本文提出了一种基于属性的访问控制模型(ABAC),它结合SAML(Security Assertion Markup Language,安全声明标记语言)和XACML(Ex-tensible Access Control Markup Language,可扩展访问控制标记语言)标准,能够基于主体、客体和环境的属性来动态地、细粒度地进行授权。新的模型更加灵活,特别适用于动态的Web服务环境。Traditional access control models are not well-suited for the services-oriented environments because they are mostly static and coarsely grained. An Attribute-based access control （ABAC） model is proposed based on SAML and XACML, which adopted the authorization mechanism dynamically and fine-grained based on subject, resource and environment attributes. The new model is more flexible, which is especially suitable for the dynamic, ad-hoc environment for Web services.

关 键 词：WEB服务 访问控制 SAML XACML 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]