联盟环境中的资源安全共享模型

文章以分布式计算环境中缔结的联盟工作环境(Coalition Environment)为背景，探讨了在这种环境下．联盟中各成员之间的资源共享和保护问题，并针对这个问题提出了自己的解决方案一资源安全共享模型(secure resources sharing)，简称为SRS。SRS是RBAC(基于角色的访问控制模型)在联盟环境中的拓展。在SRS中，联盟成员间完全平等地进行信任协商；通过引入了访问请求证书、管理者和监听者等结构要素，使得联盟的安全结构和联盟中各成员的本地安全结构得到有效隔离。SRS采用了TBAC的基于任务的访问权限管理机制，使其安全机制联盟环境中任务进程有机地统一起来，从而具有了动态安全模型的特征。

Secure Resources Sharing Model for Coalition (SRS)

In this paper, the research is focused on resources sharing and resources protection in the coalition environment built on distributed computing environment, named Secure Resources Sharing Model for Coalition (SRS). The aim of the research is to provide solution for data sharing securely among autonomous participating entities of coalition. SRS supports separation between local security infrastructure of coalition participants and security infrastructure designed for coalition environment. As an extension of RBAC model, SRS adopts task-based permissions mangement mechanism, which endow SRS with characteristic of active security.