面向WS-BPEL的访问控制策略合成研究  

ACCESS CONTROL POLICY COMPOSITION FOR WS-BPEL

作　　者：陈建飞[1] 申晨光[1] 韩伟力[1] 

机构地区：[1]复旦大学软件学院,上海201203

出　　处：《计算机应用与软件》2012年第3期195-197,215,共4页Computer Applications and Software

摘　　要：在Web服务组合中,外部子服务通常会定义访问控制策略以保护资源被安全的使用,同时组合脚本中也存在着复杂的逻辑控制结构,这两点因素使安全管理员在描述组合服务的访问控制策略变得非常复杂。提出一种基于条件的访问控制策略模型以及基于该模型的策略合成代数,将WS-BPEL语言中常见控制结构映射成策略合成表达式,通过合成外部子服务的访问控制策略,生成组合服务的访问控制策略。最后,设计了原型系统描述策略合成的流程。In Web Service composition,the access control policies are usually defined by external sub-services for protecting safe use of resources,while in composite scripts there are the complex control logic structure as well.These two factors make it extremely complicated for a system security administrator to specify the access control policies for composite services.In this paper we propose a condition-based access control policy model and the related policy composition algebra,and map the control structures familiar in WS-BPEL to corresponding policy composition expression,then construct the access control policies of the composite service based on the composition of access control policies of external sub-services.Finally,we design a prototype to depict the total process of policy composition.

关 键 词：WS-BPEL 访问控制 策略合成 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]