摘要
为了迎合目前网格计算对动态、细粒度授权的需求,针对网格资源分层式的组织结构特点,在现有的基于属性的访问控制(ABAC)模型的基础上,提出了一种针对网格资源的ABAC模型Grid_ABAC,并设计了基于XACML的Grid_ABAC实现框架,应用在GT4平台上。最后对GT4中的应用作了测试,测试结果表明授权结果与预期结果相同,且时间开销随着规模的增长并没有增长很多,在可接受范围内。证明Grid_ABAC模型在网格平台上具有一定的实用性。
In order to satisfy the grid＇ s need for dynamic and fine-grained authorization policy, this paper presented a model named Grid_ABAC for grid computing. This model based on the layed structure of grid resources and the current ABAC model. Also designed implementation architecture of Grid_ABAC with XACML and used it in GT4 platform. At last, made a test in Globus platform. The result shows that the authorization result is identical to the expected result and the time cost doesn＇ t increased apparently with the increase of test scope. Grid_ABAC model is valid in grid platform.
出处
《计算机应用研究》
CSCD
北大核心
2010年第2期699-703,共5页
Application Research of Computers
基金
国家"863"计划资助项目(2006AA01Z441)
