网格环境下基于上下文和角色的访问控制

基于角色的访问控制RBAC是当前比较流行的访问控制模型，但和其它的传统访问控制模型一样采用的是静态授权，没有考虑所处的上下文环境，在应用于以动态性为显著特征的网格计算环境，必然导致一定的缺陷。在基于角色访问控制RBAC模型的基础上进行了扩展，加入了用户活动角色、系统活动权限、用户活动权限、主体上下文、客体上下文的概念，并通过状态矩阵实现了基于上下文的访问控制，可以解决网格环境中上下文敏感的访问控制。

Context and Role Based Access Control in Grid

Role based access control is the most popular access control module at present,and can reduces workload and complexity of authorization administration.But it uses static authorization like other traditional access control method,and doesn't take the contexts into account.When applied to the computer grid which is characterized by dynamic contexts it must have some limitation.Extended role based access control module by adding user active roles,system active privileges,user active privilege,user contexts and...