Web服务访问控制模型研究

Survey of Web Services Access Control Model

本文分析了Web服务给访问控制带来的挑战性问题,包括跨域的访问控制、动态授权和标准化问题等。然后,根据访问控制模型的决策依据,对现有的访问控制模型进行了分类研究。介绍了各类模型的基本原理,分析了它们解决Web服务访问控制挑战性问题的能力。最后,对Web服务访问控制模型研究的方向进行了讨论。

This paper analyzes new challenges, which include access control across multiple security domains, dynamic authorization and standards, for Web Services access control. The paper classifies access control model according to what the model depends to making decision, and then introduces the principles of these models. After analyzing the ability to solve the new challenges, this paper discusses the research directions for Web Services access control model.