基于SOA的企业应用跨安全域访问控制  

SOA-based cross-domain access control for enterprise applications

作　　者：邴晓燕[1] 邵贝恩[1] 

机构地区：[1]清华大学自动化系,北京100084

出　　处：《清华大学学报（自然科学版）》2009年第7期1066-1069,共4页Journal of Tsinghua University(Science and Technology)

基　　金：国家"八六三"高技术项目(2007AA04Z1A6)

摘　　要：在集团型企业应用系统集成中采用面向服务架构(SOA),可以很好地适应系统异构和分布的特点,却使整个系统面临新的安全挑战。为解决SOA架构下的安全问题,该文提出了一种企业应用跨安全域访问控制方案。其核心思想是,在传统SOA实现模型的基础上,建立一个基于代理的统一服务认证授权系统,对分布式企业服务总线上的服务资源进行共享管理和访问控制,保证系统跨安全域访问的安全可靠。在某集团型企业信息化建设中,该方案能有效提高系统的安全性、可扩展性和可变更性,初步显示了良好的应用价值。The service-oriented architecture （SOA）,which is utilized for application system integration for group enterprises, can adapt to the heterogeneous and distributed features of the systems, but has problems that challenge the system security. A cross-domain access control scheme is presented for enterprise applications to resolve the SOA security problems. The core idea is to build a uniform agent-based authentication and authorization system based on the conventional SOA implement model, which achieves shared management and access control of the service resources on the enterprise service bus （ESB） to ensure safe, reliable access across the security domains. This scheme enhances the syetem security, scalability and alterability in the informatization construction of large group enterprises.

关 键 词：面向服务架构(SOA) 集团型企业 安全域 认证授权 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]