期刊文献+

一种基于XACML访问控制策略决策服务的安全模型 被引量:8

An Access Control Service of Policy Based on XACML
下载PDF
导出
摘要 访问授权是分布式系统中关键的组成部分之一,但一般没有作为独立节点实现,甚至被忽略。本文提出并实现了一种基于XACML构建策略决策点的安全模型,给出了模型三种应用基本模式,使模型适应各种环境需求,实现安全的细粒度访问控制。 Access control is a key component of a distributed system, its implementation always depends on other modules, if it is not ignored. This paper describes the research and implementation of a new Policy Decision Point system based on XACML, and presents three kinds of configuration models of PEP and PDP, so this system could be applied in many kinds of distributed systems.
出处 《微电子学与计算机》 CSCD 北大核心 2005年第8期151-154,共4页 Microelectronics & Computer
基金 "十五"863项目"科学数据网络"(2003DKA5G015)
关键词 XACML SAML 访问控制 XACML, SAML, Access control
  • 相关文献

参考文献10

  • 1Thompson M, et al. Certificate-based Access Control for Widely Distributed Resources. In: Proc.of the Eighth USENIX Security Symposium, 1999: 215-227.
  • 2Organization for the Advancement of Structured Information Standards (OASIS)" eXtensible Access Control Markup Language(XACML) Specification Set v2.0",. Oasis XACML TC, March 2004.
  • 3B Moore, Ed. Policy Core Information Model (PCIM) Extensions. January 2003 ftp://ftp.rfc-editor.org/in-notes/rfc3460.txt.
  • 4Eve Maler, Prateek Mishra, Rob Philpott, et al. Assertions and Protocol for the Oasis Security Assertion Markup Language (saml) vl.1. Technical Report, OASIS, 2003. http://www.oasisopen .org/committees/download. php/3406/oasis-sstc-samlcore- 1.1 .pdf.
  • 5Sun Microsystems. Sun's Xacml Implementation. 2003. http://sunxaeml.soureeforge.net/guide.html.
  • 6.[EB/OL].https ://mail. intemet2, edu/wws/arc/mace-opensamlusers/2003-10/msg00002.html,.
  • 7Verisign. Understanding pki. http://verising.netscape.com/security/pki/understangdinghtml,visited 2004.12.
  • 8Microsoft Knowledge Base.Description of the Secure Sockets Layer (SSL) Handshake, 2003. http://support.microsoft.com/default.aspx?scid=kb.
  • 9Steven Carmody. Shibboleth Working Group Overview and Requirements Document, 2001. http://shibboleth.intemet2.edu / docs / draft - internet2 - shibboleth - requirements - 01.html.
  • 10Rebekah Lepro. Cardea: Dynamic Access Control in Distributed Systems. http://www.nas.nasa.gov/Research/Reports/Techreports/2003/PDF/nas - 03 - 020.pdf, November 2003.

同被引文献38

引证文献8

二级引证文献6

相关作者

内容加载中请稍等...

相关机构

内容加载中请稍等...

相关主题

内容加载中请稍等...

浏览历史

内容加载中请稍等...
;
使用帮助 返回顶部