一种基于令牌密钥的云计算服务授权机制  

A KIND OF CLOUD COMPUTING SERVICE AUTHORISATION MECHANISM BASED ON TOKEN-KEY

作　　者：李勋[1] 丁建华[1] 杨涛[1] 

机构地区：[1]公安部第三研究所信息网络安全公安部重点实验室,上海201204

出　　处：《计算机应用与软件》2015年第12期294-297,共4页Computer Applications and Software

基　　金：国家科技支撑基金项目(2012BAH95F03)

摘　　要：REST服务是一种新型Web服务架构,被广泛应用于云计算平台下服务组织、访问等。现阶段REST服务采用基于角色的方式对访问者进行授权[3],无法满足云计算环境下灵活的用户需求,拒绝服务、滥用和恶意使用等安全问题日益突出[4]。针对这一问题,提出一种基于令牌密钥的身份验证机制和安全审计机制,在不影响性能的前提下能保证信息的完整性和服务供需的灵活性。实验结果表明,该方法的性能比现有方法仅相差5%,但具有较低的内存使用率和良好的安全性和灵活性。REST service is a new architecture of Web Services,and is widely applied in services organisations and accesses on cloud computation platform. Currently the REST service adopts role-based way in authorisation for visitors,which can＇t satisfy the flexible users＇ requirements in cloud computing environment,and the security issues,such as DOS,abuse and malicious use,etc.,become increasingly prominent. To solve this issue,we propose a new token-key based architecture,which includes authorisation mechanism and security autoaudit mechanism. It guarantees the integrity of information and the flexibility of services supply and requirement without impacting system performance. Experimental results show that our approach has just 5% difference in performance lower than existing methods,but has less memory occupation,excellent security and flexibility.

关 键 词：云计算 REST 安全 授权 加密 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]