基于虚拟企业的UDDI访问控制研究

UDDI Access Control for Virtual Enterprise

UDD I作为W eb服务的核心技术之一,用于商业实体之间彼此发现和共享信息,从而成为保证企业间实施动态电子商务的核心支撑体系。但是UDD I现有的访问控制策略在商务实际应用中并不完全适用,因此有必要引入新的访问控制机制。针对虚拟企业的应用需求,指出了现有UDD I访问控制技术的不足,提出基于角色的访问控制方式,设计了更加安全的虚拟企业UDD I访问控制机制,并且采用基于XML的XCAML规范,使得访问控制体系易于维护和配置。

UDDI is the key technology of Web service system, which enables the business entities to share information and discover each other; thus it become the foundation of E-business. However, the access control methods in UDDI are not so enough in actual applications. Aiming at the business needs of virtual enterprises, we point out the shortage of UDDI access control and propose a role-based access control scheme. For the ease of configuration and maintenance, we use the existing XML-based access control specifications XACML to implement the UDDI access control mechanism in virtual enterprise.