基于XACML的EPCIS访问控制模型  

Access Control Model for EPCIS Based on XACML

作　　者：李景峰[1] 李云鹏[1] 

机构地区：[1]解放军信息工程大学电子技术学院,郑州450004

出　　处：《计算机工程》2013年第4期180-183,189,共5页Computer Engineering

基　　金：河南省基础与前沿技术研究计划基金资助项目(122300410123);郑州市科技攻关基金资助项目(10PTGG340-4)

摘　　要：根据供应链系统对EPC信息服务(EPCIS)提出的访问控制需求,设计一种基于可扩展访问控制标记语言(XACML)的EPCIS访问控制模型。模型中的访问控制执行接口利用方法拦截技术实现对访问请求的拦截,并生成决策上下文对象。访问控制服务组件基于决策上下文对象中包含的用户、资源、环境和动作属性实现对访问请求的动态评估。安全通信组件利用安全性断言标记语言,结合缓存机制实现XACML授权请求/响应的实时传输。访问控制流程表明,该模型能够实现灵活的访问控制策略部署和管理,具有供应链产品信息访问控制的动态性、异构性等特点。The special access control requirements of EPC Information Service（EPCIS） in the supply chains are analyzed, and an EPC1S access control model based on Extensible Access Control Markup Language（XACML） is presented. The access control execution interface in the model can intercept the access requests by using the method intercepting technology, and produce the corresponding judgment context, Based on the user property, resource property, environment property and action property, which are included into the judgment context, the access control service component can dynamically assess the access requests. The secure communication component can effectively provide the real-time transmission for XACML authorization request/response messages, by combining the Security Assertion Markup Language（SAML） and the caching mechanism~ The access control workflow indicates that the model can implement the flexible and variable deployment and management of the access control strategies, which is well fit for implement highly dynamic and heterogeneous access control function for the product information in the supply chains.

关 键 词：电子产品码网络 EPC信息服务 访问控制 可扩展访问控制标记语言 安全性断言标记语言 供应链 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]