基于综合安全保护质量的安全服务协商模型

A Security Service Negotiation Model Based on General Quality of Protection

在基于分布式服务的系统体系中,上层应用系统需要确定下层安全服务能够按照要求提供安全服务功能,根据不断变化的实际需要和当前系统状态自适应地调整服务者和服务要求,并同时保障系统的安全性。本文探讨了在应用系统和安全服务之间对安全保护质量进行协商的协议模型,目标是使应用系统所要求达到的安全水平能获得安全服务的支持,并能得到下层安全服务的有效遵守,使系统的整体安全水平得到保障。

In a system based on distributed services, the upper-level application system requests the lower-level security services to provide various security functions according to the former＇ s demands, to adjust the service relationship with different service providers on different requests automatically along with the change of the current requests and states, to protect the security at the same time. A negotiation protocol model based on the quality of protection which is used between applications and security services is presented here,and its goal is to ensure the security services＇ support and abidance on the security standard required bv the applications, which will ensure the general security of the whole system.