面向服务网格的访问控制模型研究

Research of service-oriented grid access control model

建立以网格服务为中心的访问控制模型,通过集中式的管理来降低网格环境中访问控制复杂性,将角色网格服务的分配和服务的访问授权分离管理,能够有效地保护资源拥有者的权限。在中国科学院e-science科学数据网格项目中的初步应用实施表明了该模型的灵活性和有效性。

Centralized management was used to reduce the complexities of the access control in the grid environment, The process of defining the role＇ s services and implement formally specified policy for services were separated to protect the profits of the resource owners, This proposed, scheme had been incorporated into science data grid project of CAS, Preliminary results demonstrate its flexibilities and effectiveness.