一种基于TRBAC的动态多级Web服务访问控制模型  

TRBAC-based Dynamic Multilevel Access Control Model for Web Services

作　　者：陈学龙[1] 郑洪源[1] 丁秋林[1] 

机构地区：[1]南京航空航天大学计算机科学与技术学院,南京210016

出　　处：《计算机科学》2014年第3期181-184,222,共5页Computer Science

摘　　要：在分析面向Web服务访问控制研究现状的基础上,针对当前Web服务访问控制模型中存在的不足,提出了一种基于TRBAC的动态多级Web服务访问控制模型(DMWS-TRBAC)。给出了其概念定义、形式化表示及约束规则。新模型引入了服务及其属性,设计了三级访问控制机制,达到了更加安全的细粒度授权。提出了角色扮演者和任务管理者的概念,扩充并严格定义了角色约束和任务约束的内涵,综合考虑时限约束、任务上下文、任务状态及职责分离原则,实现了更加灵活的动态授权。本模型提高了Web服务的安全性,完善了Web服务的访问控制机制,在某军工企业条件保障系统中的初步应用效果良好。Based on the research status of access control for Web services and according to the shortcoming in current models,a TRBAC-based dynamic multilevel access control model for Web services was proposed.The model defines some concepts and gives the formal representation and constraint rules.To achieve fine-grained permission,the model introduces services and services attributes,and designs the mechanism of three levels access control.The concepts of Role Actor and Task Manager were presented.The connotation of role constraint and task constraint were extended and defined strictly.The model combines temporal constraint,task context,task state and SSOD principle to describe dynamic permission,and improves the security of Web services and the mechanism of access control for Web services.The preliminary result of the model applied in the condition security system of some defense industry enterprise is good.

关 键 词：TRBAC 动态多级 WEB服务 访问控制 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]