基于XML的组安全策略描述

1 引言基于多播的安全组通信技术是当今Internet上大规模信息传播应用的基础。安全多播应用情形很多,最典型的分类为单源多播(如付费点播)和多源多播(如多方视频会议),安全需求各不相同,不可能有一个统一的解决方案。 SIMM是为多播应用构造的安全基础设施,应用通过定义策略来配置安全服务,策略是连接动态的用户需求和静态的系统实现之间的桥梁。策略的定义、表示、翻译及实现等是SIMM策略框架的基本内容。

GSPML: A Group Security Policy Description Language Based on XML

Development of applications built on multi.party communication has made the need for the management of policy. Security Policies are used to bridge the gap between static implementations and user requirements. A security policy defines the security relevant behaviors, access control parameters, and security mechanisms used to implement the group. A policy specification language defines both how a policy is represented and the rules with which the representation is interpreted. This paper describes the design space of security policy, and presents Group Security Policy Markup Language(GSPML)specification based on XML. GSPML, which is oriented to both people and computers, will be flexible and expressive and enough to support different secure requirements.