一种灵活的访问控制策略及其应用研究*

提出了一种声明式的、面向对象的、灵活访问控制策略的形式化描述、决策算法和实施框架。与传统访问控制策略相比，它包含授权类型、主体、权限、限制、影响等策略元素，能够更加精确地描述各类控制需求；同时，提出的策略决策算法和实施框架能适应决策环境的动态变化，有效满足复杂分布式系统的访问控制需求；最后，作为应用的例子，介绍了这种策略和实施框架在分布式园区网中的实现和应用情况。

Flexible access control policy and its application research

This paper presented a flexible,object-oriented and declarative access control policy,its decision-making algorithm and enforcement framework.Compare to traditional access control policies,it consisted of five components-authorization type,subject,permission,constraint and effect,which made it flexible enough to express a variety of access control requirements.Presented decision-making algorithm and enforcement framework were adaptived to dynamic environment change,and could efficiently satisfy the requirement for distributed application.As an example of such application,also discussed its implementation and application in a distributed campus network system.