结合信任的Web Services属性访问控制模型  

Web services attribute access control model combined with trust

作　　者：王莹[1,2] 张永胜[1,2] 张永强[3] 杨晶[1,2] 孙翠翠[1,2] 

机构地区：[1]山东师范大学信息科学与工程学院,山东济南250014 [2]山东省分布式计算机软件新技术重点实验室,山东济南250014 [3]海军航空工程学院研究生管理大队,山东烟台264001

出　　处：《计算机工程与设计》2011年第8期2575-2579,共5页Computer Engineering and Design

基　　金：山东省自然科学基金项目(Y2008G22)

摘　　要：针对目前Web Services访问控制模型中存在访问控制粒度较粗、授权不灵活及请求者的行为可信性不固定等缺点,设计了一种新的WebServices属性访问控制模型,并在该模型中引入一种改进的信任评估算法。该算法用来衡量WebServices请求者的信任值,提出了一种结合信任的Web Services属性访问控制模型——T-WSAACM(web services attribute access controlmodel combined with trust)。模型及算法分析结果表明,该模型不仅有效地阻止了不可信的Web资源请求者,使得Web Services的安全性得到进一步增强和保障,而且可以依据Web Services请求者不同的信任等级授予强弱级别的权限,这种灵活的权限授予机制更能满足实际的需求。Aiming at the defects of authorized granularity thicker and the credibility or variability of requester＇ s behavior in web services access control model, a new web services attribute access control model is designed and an improved trust evaluation algorithm is introduced, which is used to measure the requester＇ s trust value. An attribute access control model for web services combined with trust- T-WSAACM is proposed. The analysis of model and algorithm shows that this model not only effectively prevents incredible requester, which makes the security of web services further enhanced and protected. But also different requesters can be authorized different level permissions, which can be better meet actual needs.

关 键 词：属性 信任 可扩展访问控制标记语言 WEB服务 访问控制 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]