基于属性上下文可知的Web服务访问控制

A Attribute-Based Context-Aware Access Control for Web Services

Web服务本身的特性和分布式网络环境的复杂性使得访问控制成为一个富有挑战性的问题。该文提出了一种新型访问控制模型,引入了上下文参数,使得模型是上下文可知的,并能根据当时的上下文情况进行控制决策;采用基于用户属性的Web服务访问授权和控制方式,用户通过提供相关的信任证证明其拥有的属性。该模型较好地解决了Web服务的访问控制的新问题,适合分布式的、动态变化的Web服务环境。

Access control for Web service is a challenging problem mainly because of the properties of web services and the complexity of distributed net-environment.This paper presents a novel access control model for Web services,which introduces context parameters to control decision according to context-dependent at the time,and is context-aware.This model adopts user's attribute-based access authorization method for Web services,user responsible for proving the possession of the required attributes for the requested services by providing relevant credentials.This model resolves the emerging problem of web services,and is appropriate to a distributed and dynamic web services environment.