基于角色的大数据认证授权一体化方案  

Integration Scheme of Authentication and Authorization for Big Data Based on Role

作　　者：庄浩霖 尚涛[1,2] 刘建伟 ZHUANG Haolin;SHANG Tao;LIU Jianwei(School o f Electronic and Information Engineering, Beihang University, Beijing 100083, China;School of Cyberspace Security, Beihang University, Beijing 100083, China)

机构地区：[1]北京航空航天大学电子信息工程学院,北京100083 [2]北京航空航天大学网络空间安全学院,北京100083

出　　处：《信息网络安全》2017年第11期55-61,共7页Netinfo Security

基　　金：国家重点研发计划[2016YFC1000307];国家自然科学基金[61571024]

摘　　要：安全的认证授权机制是保证大数据平台安全的基础。文章分析了现有大数据环境下所面临的认证与授权方面的安全问题,将基于Kerberos的认证方案与基于XACML框架的访问控制方案相结合,设计了一个基于角色的大数据平台认证与访问控制一体化方案,并在实际环境下对方案进行实验验证。实验表明,本方案可以实现大数据平台远程登录认证与基于角色授权的功能,满足用户对大数据平台认证授权的安全需求。Secure authentication and authorization are the foundation to ensure the secunty of big data. In this paper, we analyze the security problems of big data environment from the perspective of authentication and authorization, combine the authentication scheme based on Kerberos and the access control scheme based on the XACML framework, and design an integration scheme of authentication and authorization for big data based on role. This scheme is also verified m a specific environment. Experimental results show that the proposed scheme can realize the remote authentication and role based authorization for a big data platform and fulfill the secure needs of authentication and authorization for a big data platform.

关 键 词：大数据 认证 访问控制 角色 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]