一种面向服务的统一授权管理机制

针对面向服务体系结构(Service-O riented Arch itecture,SOA)的授权管理中存在的安全问题,提出了一种面向服务的统一授权管理机制,阐述了授权原理,定义了数据模型,描绘了算法流程。该机制以RBAC(Role-Based Access Control)模型为基础,通过引入用户域概念和三种授权偏序关系,支持用户间代理,具备推理能力,为各SOA应用提供强访问控制。实践表明,该机制是简单、安全、有效的,具有很好的应用前景。

A Uniform Permission Management Mechanism in Service- Oriented Architecture

In allusion to security problem in process of the permission management in Service-Oriented Architecture(SOA),this paper proposes a service-oriented uniform permission management mechanism,illustrates its permission principle,defines its data model,and depicts its arithmetic flow.The mechanism is capable of delegating and reasoning by introduction of the user field and three partial relations in permission,and then provides strong access control in SOA,based on RBAC(Role-Based Access Control) model.The mechanism is simple,secure and effective in practice and is suitable for extensive applications.