网格计算中一种基于属性的访问控制方法*

为了迎合目前网格计算对动态、细粒度授权的需求，针对网格资源分层式的组织结构特点，在现有的基于属性的访问控制（ABAC）模型的基础上，提出了一种针对网格资源的ABAC模型Grid_ABAC，并设计了基于XACML的Grid_ABAC实现框架，应用在GT4平台上。最后对GT4中的应用作了测试，测试结果表明授权结果与预期结果相同，且时间开销随着规模的增长并没有增长很多，在可接受范围内。证明Grid_ABAC模型在网格平台上具有一定的实用性。

Attribute-based access control method in grid computing

In order to satisfy the grid's need for dynamic and fine-grained authorization policy,this paper presented a model named Grid_ABAC for grid computing.This model based on the layed structure of grid resources and the current ABAC model.Also designed implementation architecture of Grid_ABAC with XACML and used it in GT4 platform.At last,made a test in Globus platform.The result shows that the authorization result is identical to the expected result and the time cost doesn't increased apparently with the incre...