Web服务中基于XACML和SAML的访问控制模型  

Access Control Model Based on XACML and SAML in Web Services

作　　者：魏伟[1] 

机构地区：[1]江苏海事职业技术学院,南京211170

出　　处：《电脑编程技巧与维护》2010年第20期94-95,156,共3页Computer Programming Skills & Maintenance

摘　　要：Web服务为传统的安全模型带来了许多新的安全隐患,为了解决Web服务中存在的安全性问题,通过分析XACML、SAML以及RBAC等相关技术,提出了一种基于XACML和SAML的RBAC模型。该模型采用XACML对用户进行访问控制,利用角色管理用户授权,使用RBAC分离用户和权限,提高了权限管理的灵活性;通过SAML协议使不同角色的用户实现单点登录,整个架构基于XML技术,保证了模型的灵活性以及扩展性。Web Services brings lots of new security challenges for the traditional security model , in order to solve the security problem of Web services, we propose the RBAC model based on XACML and SAML,which through analyzing the XACML、SAML and RBAC, this model adopts XACML to control and interview the users, applies role to manage the authorization, uses RBAC to separate the users and authority, improves the flexibility of the authority management. Let the users which are different roles single sign -on successfully through SAML, the whole frame based on XML ensure the flexibility and expansibility of the model.

关 键 词：WEB服务 可扩展访问控制标记语言 安全声明标记语言 基于角色的访问控制技术 单点登录 

分 类 号：TP393.09[自动化与计算机技术—计算机应用技术]