基于J-sim的主动结点资源访问控制策略实现

J-Sim-based Access Control Research for Active Node Resources

在主动节点资源访问控制上,设计了一种新的主动节点资源访问控制机制.提出利用权能对资源访问控制策略进行描述,动态维护.对用户的管理采用基于角色的方法.在主动信包中封装用户角色信息,主动节点解析出用户角色后,依据它在策略库中匹配相应的描述控制访问权限策略的方法,即权能.通过权能实现对节点资源的访问.并通过仿真试验验证了算法的有效性.

This thesis researches the access control for active node resources in active network, and puts forward a new access control policy for active node resources. A new access control policy is designed for active node resources in this paper. Describes the policy of resource access control with capability, so the policy has dynamic maintenance characteristic. The method for access control based on roles is adopted in user management. After decoding the user role encapsuled in active packet, we can obtain the method describing policy of access control in policy store, called capability. The access control for active node can be completed by capability.