空间知识网格安全体系结构模型研究

Research on security architecture model of spatial knowledge grid

阐述空间知识网格环境中的安全需求以及现有安全技术的不足,研究空间知识网格安全策略,建立空间知识网格安全体系结构模型.该模型基于属性证书和策略集,用XACML作为描述访问控制决策的语言,充分利用Web服务技术,集成权限管理基础设施和XACML,使自身适合空间知识网格的需求,可支持基于角色的访问控制,具有灵活性、适应性、可伸性和可扩展性等特点.

The necessity of security in the environment of spatial knowledge gird and the deficiency of security technique available were expounded. The security strategy of spatial knowledge gird was investigated and its architectural model was set up. On the basis of attribute certificate and policy sets, by using XACML as the language for characterizing the access control of decision-making, fully employing the Web service technique, and integrating the infrastructure of authority management and XACML, this model was helped itself to be appropriate to the necessity of the spatial knowledge gird and be able to support the role-based access control, exhibiting its flexibility, adaptability, extensiveness, and developability.