一种改进UCONB的服务网格授权策略规范  

Improved UCON_B Authorization Policy Specification for Service Grid

作　　者：桂劲松[1] 陈志刚[1] 胡玉平[2] 邓晓衡[1] 刘安丰[1] 

机构地区：[1]中南大学信息科学与工程学院,湖南长沙410083 [2]广东商学院信息学院,广东广州510320

出　　处：《小型微型计算机系统》2009年第3期391-397,共7页Journal of Chinese Computer Systems

基　　金：国家自然科学基金项目(60573127)资助;湖南省自然科学基金项目(06JJ30032)资助

摘　　要：针对基于职责行动的授权策略规范表达能力弱的缺陷,为了在服务网格中实现决策组件与执行组件的合理分工,促进独立授权过程的并发执行,提出一种基于改进UCONB的授权策略规范.用委托凭证处理过程的状态组合替换原来简单的访问状态,决策组件根据请求时系统状态输出合理的委托凭证,根据系统状态的变化再决策可转换委托凭证的处理状态.该规范有效避免了相同访问请求重复产生委托凭证,委托凭证能真实反映授权的实际需求.To keep free from weak capability of express of the policy specification based on obligation action decision-making, realize reasonable task assigning between decision component and execution component, and improve concurrent enforce of independent authorization processes in service grid, an improved UCONB-Based authorization policy specification is proposed. Delegation certification processing statuses are defined to replace the simple access status. Decision component can make the reasonable delegation certification based on the system status when a request arrives, and also make decision to change the delegation certification processing status when the system status is changed. This method effectively avoids that the same access requests generate the delegation certification repeatedly, and the delegation certification really reflects actual demands of autho- rization.

关 键 词：服务网格 授权决策 委托凭证 策略规范 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]