自动信任协商中一种策略一致性管理方法  

Approach for policy consistency management in automated trust negotiation

作　　者：汪应龙[1] 胡金柱[1] 

机构地区：[1]华中师范大学计算机科学系,武汉430074

出　　处：《计算机应用》2008年第7期1795-1797,共3页journal of Computer Applications

基　　金：国家社会科学基金资助项目(06BTQ024);国家重点实验室开放研究基金资助项目(SKLSE04-018);湖北省科技攻关项目(2005AA101C43)

摘　　要：自动信任协商(ATN)是指通过暴露信任凭证与访问控制策略进行匹配以达到建立信任关系的目的。在开放的分布式环境中,策略一致性管理便于网络用户发现资源,并及时了解访问资源所需具备的条件。当前,自动信任协商中的策略一致性管理由资源方进行维护,这不利于资源被发现,限制了资源的共享,浪费了资源方宝贵的计算资源。针对这些问题,提出了一种有效的策略一致性管理方法。该方法设立可信第三方,使用LDAP协议集中管理资源方的访问控制策略,使用通用语言XML对策略进行描述,可有效检测与避免策略更新、删除等所带来的策略不一致问题。Automated Trust Negotiation （ATN） provides a means to establish the trust membership by disclosing and matching credentials and access control policies. In the open and distributed environment, policy consistency management helps users to find various resources, and makes users know what they need to meet the requirements of the access control policy. Currently, policy consistency management is maintained by resource provider in ATN, which restricts resources to be found, limits the sharing and wastes the valuable computational power of the resource provider. To solve the problems, an efficient policy consistency management approach was proposed in the paper, in which a trusted third party was created to store policies and manage the access control policies in a centralized method by using Lightweight Directory Access Protocol （LDAP）, and to describe policies by using the general XML and to effectively check and handle policy conflicts from policy updating and deleting.

关 键 词：自动信任协商 访问控制策略 策略一致性 轻量级目录访问协议 授权 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]