基于XACML的Web服务访问控制应用探讨

Discussion of access control model for web services based on XACML

首先对访问控制技术DAC、MAC和RBAC经行了分析,接着对可扩展访问控制标记语言XACML及其访问控制模型的原理经行了研究,最后提出了一种应用于动态电子商务中的基于XACML的WEB服务访问控制方案供探讨.

This paper firstly analyzes the access control technology, such as DAC, MAC and RBAC, then studies the extensible access control markup language and the principle of access control model baded on XACML, and finally presents the solution based on XACML to dynamic E-commerce in web services.