P2P权限委托与访问控制模型

Privilege Delegation and Access Control Model for P2P

提出了一种P2P权限委托与访问控制模型,该模型包括3个主要协议,即权限委托协议、资源检索协议和访问控制协议。根据权限委托协议,委托发起方PEER_S选择信誉值高的对等点作为受委托对等点PEER_D,颁发权限委托证书Cd。按资源检索协议,PEER_D选择信誉值高的资源提供者发送资源请求。根据访问控制协议,资源提供者PEER_R通过资源请求者的信誉证书集Cts和权限委托证书Cd进行访问控制。基于着色Petri网验证协议模型的可达性等性质,使用CPN Tools对协议进行模拟仿真。

This paper presents a privilege delegating and access control model for P2P. This model includes three main protocols, such as privilege delegate protocol, resources search protocol, and access control protocol. Privilege delegate protocol defines that the task initiator, PEER_S selects delegated peers PEER D who will delegate PEERS to finish tasks with highest trust value, and awards privilege delegation certificate Cd. The resources search protocol defines that PEER_D send resource request to the provider with the highest trust value. The resource access protocol defines the PEER_R access control of resource with the credit certificates Cts and privilege delegation certificate Cd of requesting peers. By CPN Tools, the protocols are simulated based on the characteristics with colored Petri-net, such as teachability.