一种基于网格虚拟组织的跨域访问控制算法*

在网格中，主机存在于不同的信任域中，在主机间建立互信是实现资源共享、协同工作的前提，为资源的访问建立规则是实现资源安全的基础。网格中的访问控制算法旨在解决上述两个问题。结合安全数据库的访问控制策略，融入基于身份和基于行为的访问控制思想，实现了以任务发起者为中心的网格虚拟组织的跨域访问控制，并对其中建立互信的核心算法进行了BAN逻辑推理。

Multi-domain access control algorithm based on grid virtual organization

In grid environment, different users belong to different trust domains. In order to achieve the goal of sharing resources and working coordinately, it is very necessary to build a trust model. Besides, it is of equal importance to make access managements which can assure safety of resource. The access control algorithms focused on the two above problems. This paper designed a novel algorithm into which access control based on identity and taken behaviors, and considered the policy of access control used in secure database in it too. Multi-domain access control built by the resource of mission could work well by using this new algorithm whose correctness was proved by the BAN logic.