基于XML的多粒度访问控制系统

如何为大量以Web服务形式存在的Web关键资源和应用中涉及到的XML文档资源提供安全访问控制并把二者很好地结合起来是当前电子商务安全服务研究中的一个重要课题。为此,该文提出一种基于XML的粗细粒度结合的多粒度访问控制系统。该系统采用基于角色的访问控制模型(RBAC),在扩展XACML规范的基础上,提出一种相对统一的策略描述语言;引入临时授权的概念,用于表示和实现更为丰富的访问控制策略;并提供灵活的安全映射接口,使其易于和其他安全系统相结合,为企业及企业间的应用提供访问控制服务。

XML-Based Multi-Granularity Access Control System

How to supply secure access control for the key resource largely existed as Web services and XML documents involved in application and further combine them as a whole is one of the important research tasks about e -business security service.So,this paper brings forward a XML -based multi -granularity access control system.This system takes the role-based access control model(RBAC)and on the base of XACML advances a relatively uniform policy language.Besides this,it import the concept about provisional authority to express and implement more abundant access control policy.It also offers some flexible security mapping interface to combine with other security systems easily and confess access control service for the applications of enterprises.