Web服务设计中的访问控制验证  

Verification of access control in Web services designing

作　　者：胡若[1] 徐虹[2] 

机构地区：[1]广东技术师范学院计算机学院,广州510665 [2]广东技术师范学院工业中心,广州510665

出　　处：《计算机应用研究》2010年第9期3503-3506,3524,共5页Application Research of Computers

基　　金：国家科技部创新基金资助项目(07C26216402072);国家自然科学基金资助项目(10771039)

摘　　要：提出了一种新颖的方法,用于在设计阶段确定Web服务设计是否能根据其访问控制策略及凭证发布策略进行实施。将Web服务和Web服务设计均模拟为演进系统,并用有向图表示Web服务的凭证发布策略。证明了Web服务设计中所有可能的会话,其实都可以通过将请求者Web服务的凭证发布策略与被请求者Web服务的访问控制策略相匹配而实现。利用了一个资源发布图来完成这种证明。This paper proposed a novel approach to determine at design time whether by a designing could be implemented based on their access control policies and credential disclosure policies. Model both Web services and Web services designing as transition systems and represent Web services credential disclosure policies as directed graphs. Then verify that all possible conversations of the Web services designing could be implemented by matching credential disclosure policies of the invoker Web service with the access control policy of the Web services being invoked. Proposed a resource release graph to enable this verification.

关 键 词：访问控制 策略 WEB服务 复杂系统 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]