Web服务提供方安全模型的设计、建模与分析

Design,Modeling and Analysis of a WS Provider Security Model

随着Web服务应用的迅速发展,Web服务提供方的安全问题已成为制约其实际应用的主要障碍之一。文中着重讨论了Web服务提供方面临的安全问题,引入了一种基于安全策略与实现分离的信息安全解决模型,并根据Web服务的实际情况进行了改进,方便了Web服务提供方动态地制定安全策略、灵活地实现策略指导下的各种安全措施。最后,采用投影时序逻辑(PTL,Projection Temporal Logic)形式化描述了该模型中资源访问决策部分的规范说明。

With the rapid development of the Web serices applications, the Web scrvices seeuriry issue has emerged as one of obstackes in busncss applications. In particular, the security issue of Web serviees providers becomes more imporatnt than other parts. Discusses the security issues faced by Web services providers, and propcses an information sceurity solving model. With this model ,the security policy and its implementation are separatcd, In addition, to facilitate the sceurity designcers of Web scrvices providers to understand and analyze the model,decriles the speeification of the resource access decision model using projection temporal logic （PTL）.