网格环境中基于语义的ABAC属性研究  

Attribute research of ABAC based on semantic in grid environment

作　　者：胡殿友[1] 张斌[1] 

机构地区：[1]解放军信息工程大学电子技术学院,河南郑州450004

出　　处：《计算机工程与设计》2010年第14期3174-3176,3184,共4页Computer Engineering and Design

基　　金：国家863高技术研究发展计划基金项目(2006AA01Z457)

摘　　要：为解决网格环境中域间互操作时基于属性的访问控制(attribute based access control,ABAC)策略之间的语义异构问题,提出一种利用属性语义信息辅助域间安全策略表示的方法。根据主客体及环境属性的多样性和二义性等特点,对EduPerson规范、SAML属性轮廓、QoS测度等领域知识进行分析,并构建出SHIQ(D)描述逻辑的通用属性本体UniAttOnt。在此基础上,给出了利用本体知识使用属性语义信息辅助属性一致性检测和策略表示等的具体方法,最后的实例分析表明了该方法的可行性。To solve the heterogeneous semantic problems of the ABAC policies in grid environment,a method to assist the security policy representation using semantic attribute information between domains is proposed. Based the diversity and ambiguity feathers of the subject,object and environment attributes,the EduPerson specification,SAML attribute profile and QoS measures are analyzed and the universal attribute ontology UniAttOnt based on the SHIQ （D） description logic is constructed. Based on these,the concrete methods to assist the attribute consistency check and policy representation utilizing ontology knowledge and semantic attribute information are provided. Finally,a case study is showed to verify the feasibility of the method.

关 键 词：基于属性的访问控制 属性本体 描述逻辑 一致性检测 策略表示 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]