SCoAC:一个面向服务计算的访问控制模型

提出了一个面向服务计算的访问控制模型SCoAC．在该模型中服务实体间的交互被看作是双方平等地服务于应用系统,通过环境中各实体间关系的描述,表达了服务间以所在管理域间信任关系为基础、以所处应用上下文为依据的授权关系,并通过引入“绑定上下文”匹配机制为细粒度策略的实施提供了支持．面向服务的应用系统的动态变化在模型中得以表达,并直接反映到服务间的授权关系之上．

SCoAC: A Service Computing Oriented Access Control Model

To protect the services against illegal accessing, misusing and tampering is the essential problem in service oriented computing paradigm. As existing access control models and mechanisms can hardly meet the requirements of securing the services in the SOC environment completely, an access control model SCoAC is proposed in this paper. Interactions happening between services are viewed as the contributing processes from both sides to the application system. By specifying the relationship among the entities in the system, the model expresses the authorization for services capturing the trust relationship between their administration domains as well as the application context. This paper also introduces a BindingContext matching mechanism to support fine-grained access control. The evolution of application systems can be mapped onto the changing of the authorization status for the services effectively.