一种面向Web服务的动态分级角色访问控制模型  

A New Dynamic Hierarchical RBAC Model for Web Services

作　　者：朱一群[1] 李建华[1] 张全海[1] 

机构地区：[1]上海交通大学电子工程系,上海200240

出　　处：《上海交通大学学报》2007年第5期783-787,796,共6页Journal of Shanghai Jiaotong University

基　　金：国家高技术研究发展计划(863)项目(B3090C;Y0093)

摘　　要：在回顾了目前关于面向服务以及面向Web服务的访问控制研究状况和进展的基础上,提出了一个全新的面向Web服务的动态分级角色访问控制模型.在该模型中,引入了授权组概念和分级访问控制机制,有效增强了Web服务访问控制的灵活性、独立性和扩展性,完善了Web服务权限管理,提高了Web服务应用的安全性,为Web服务提供了更为全面的访问控制机制.Web services are vulnerable to various types of security attacks because of openning network and its loose-coupling construction. One of the security attacks is that web services resources are accessed by unauthorized users. This paper viewed the development of services-oriented access control and web services access control technology, and then presented a new dynamic hierarchical RBAC model for web services. The model introduces the notion of authorization group and mechanism of hierarchical access control. So it can enhance the flexibility and independence and expansion for web services access control,consummate the privilege management for web services access control,effectively enhance the security for web services applications and produce more perfect mechanism of access control for web services.

关 键 词：WEB服务 访问控制 动态分级 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]