| 多域环境下工作流访问控制时序策略组合研究 |
| |
| 引用本文： | 唐卓,刘国华,李肯立.多域环境下工作流访问控制时序策略组合研究[J].计算机科学,2011,38(1):125-129. |
| |
| 作者姓名： | 唐卓 刘国华 李肯立 |
| |
| 作者单位： | 湖南大学计算机与通信学院计算机系,长沙,410082 |
| |
| 基金项目： | 本文受国家自然科学基金项目(90715029,60603053)，中央高校基本科研业务费专项资金(531107040053)资助。 |
| |
| 摘 要： | 多域环境下工作流访问控制策略往往表现为异构策略的时序组合,其基本需求是使访问主体在一定的时间段或者时间周期内具有对客体的访问权限.XACML在描述策略组合时,并没有体现异构策略组合时态约束.根据GTRBAC提出的时态约束种类,定义了相关时态策略并进行了图解说明;并对XACML进行了扩展,引入了相应的时态约束元素.最后,...
|
| 关 键 词： | 时态约束 策略组合 XACML 工作流 |
Research on Workflow Access Control Temporal Policy Combine in Multi-domains |
| |
| TANG Zhuo,LIU Guo-hu,LI Ken-li.Research on Workflow Access Control Temporal Policy Combine in Multi-domains[J].Computer Science,2011,38(1):125-129. |
| |
| Authors: | TANG Zhuo LIU Guo-hu LI Ken-li |
| |
| Affiliation: | (Dept. of Computer,Institute of Computer and Technology, Hunan University,Changsha 410082,China) |
| |
| Abstract: | In multi-domains environment, workflow access control policy is consisted of heterogeneous temporal policies in difference autonomic domains,and its requirement is special subjects can access special objects in perodic time or duration time. While XACML specifics policy combine, it does not contains temporal constraint. Based on the kinds of temporal constraint proposed by UTRBAC, this paper defined temporal constraints policies and illustrated by figures. It is extended from XACML by introducing correspond temporal constriant elements. Finally, this paper illustrated that the extended XACML can describe heterogeneous temporal policy combine conveniently through a example. |
| |
| Keywords: | Temporal constraint Policy combine XACML Workflow |
| 本文献已被 CNKI 万方数据 等数据库收录！ |
|
点击此处可从《计算机科学》下载全文 |
|
