期刊文献+

基于Quorum系统的分布式访问控制框架研究 被引量:4

Research on Quorum System-based Framework for Distributed Access Control
下载PDF
导出
摘要 从通用访问控制系统出发,提出以quorum系统来设计访问控制框架,给出了基于互斥协议的quorum分布式访问控制系统(MQ-DACS),以在保持高效率的情况下,提高访问控制决策的稳定性和安全性。进一步分析了在系统结点不可靠的环境中,系统能并行执行的访问控制容量同系统可用性之间的关系,并给出了最佳方案的选取依据。 By researching on generalized system for access control, the paper put forward an access control framework adopting quorum system, and presented a mutual quorum distributed access control system, with the high efficiency and the stability and security. Furthermore, the relation of system capability and system availability under the circumstance that the system nodes are not reliable was analyzed,and a result was given that the mode of the optimization of the entire system considers the capability and availability.
出处 《计算机科学》 CSCD 北大核心 2010年第5期91-94,111,共5页 Computer Science
关键词 分布式访问控制 访问控制框架 QUORUM系统 可用性 访问控制容量 Distributed access control Access control framework Quorum system Availability Access control capability
  • 相关文献

参考文献14

  • 1Abrams M, LaPadula L, Eggers K, et al. A generalized frame-work for access control: An informal description[C]//The 13^th National Computer Security Conference. 1990.
  • 2ITU-T, Rec. X. 812, ISO/IEC 10181-3, The Security Frame - works for Open Systems: Access Control Framework, 1996.
  • 3Beznosov K, Deng Y. Engineering access control in distribution applications. 2000.
  • 4Thompson M, Johnston W, Mudumbai S, et al. Certificate-based access control for distributed resources[C]// Proceeding of Eightth USENIX Security Symposium ( Security ' 99 ). 1998 :215-228.
  • 5Park J S, Sandhu R, Ahn G. Role-based access control on the Web[J].ACM Transaction on Information and System Security. 2001,4(1) :37-71.
  • 6Woo T Y C, Lam S S. A framework for distributed authorization[C]//Proceedings of the 1^st ACM Conference on Computer and Communications Security. ACM Press, 1993:112-118.
  • 7Woo T, Lam S. Designing a Distributed Authorization Service[C]//Proceedings of 17^th Annual Joint conference of the IEEE Computer and Communications Societies, INFOCOM, IEEE. 1998:419-429.
  • 8Malkhi D. Quorum Systems[J].Encyclopedia of Distributed Computing, 1999,3 ( 1 ) : 25-30.
  • 9Naor M,Wool A. The load, capacity and availability of quorum systems[C]//Proceedings of 35^th IEEE Sump. Found. of Comp. Science. 1994: 214-225.
  • 10Cheung S Y, Ahamad M. The grid protocol:A high performance scheme for maintaining replicated data[J]. Knowledge and Data Engineering, 1990,4 ( 6 ) : 438-445.

二级参考文献65

  • 1[42]R De Prisco, D Malkhi. On k-set consensus problems in asynchronous systems. IEEE Trans on Parallel and Distributed Systems, 2001, 12(1): 7~21
  • 2[43]D Malkhi, M Reiter. Probabilistic quorum systems. The Information and Computation Journal, 2001, 6(2): 267~273
  • 3[44]Chang Ye-In, Chen Bor-Hsu. A distributed algorithm for resource allocation with probabilistic quorum systems. The Int'l Conf on Networks, Parallel and Distributed Processing, and Applications (NPDPA 2002), Tsukuba, Japan, 2002
  • 4[45]Akhil Kumar. An efficient superGrid protocol for high availability and load balancing. IEEE Trans on Computer, 2000, 49(10): 1126~1133
  • 5[46]Hideaki Yoshimura, Hirotsugu Kakugawa. A load balancing algorithm based on probabilistic quorum system and its experimental evaluation. IPSJ Journal Abstract, 2002, 43(3): 3~9
  • 6[47]G Chokler, D Dolev. A quorum based approach to CORBA fault-tolerance. European Research Seminar on Advances in Distributed Systems (ERSADS 2001), Bologna, Italy, 2001
  • 7[1]D Gifford. Weighted voting for replicated data. The 7th ACM Symp on Oper Syst Principles, Pacific Crove, CA, 1979
  • 8[2]R H Thomas. A majority consensus approach to concurrency control for multiple copy databases. ACM Trans on Database Systems, 1979, 4(9):180~209
  • 9[3]D K Giifford. Weighted voting for replicated data. The 7th ACM Symp on Operating Sytems Principles, California, USA, 1979
  • 10[4]O Theel. A general framework for modeling data replication schemes. In: Proc of the Int'l Workshop on Modeling, Analysis and Simulation of Computer and Telecommunication Systems (MASCOTS'93). San Diego, CA: SCS and IEEE, 1993. 247~250

共引文献10

同被引文献21

  • 1崔瑞超.浅谈中国高速铁路的发展[J].新课程学习(中),2010(10):30-31. 被引量:2
  • 2王钰洁,王宝树.网络中心战概念及其体系结构模型[J].情报指挥控制系统与仿真技术,2005,27(6):30-34. 被引量:11
  • 3马建刚,黄涛,汪锦岭,徐罡,叶丹.面向大规模分布式计算发布订阅系统核心技术[J].软件学报,2006,17(1):134-147. 被引量:128
  • 4林闯,封富君,李俊山.新型网络环境下的访问控制技术[J].软件学报,2007,18(4):955-966. 被引量:67
  • 5National Institute of Standard and Technology. Public key infrastructure, Final Report [R]. MITRE Corporation, 1994.
  • 6Naor M,Wieder U. Scalable and dynamic quorum systems [J]. Distributed Computing, 2005,17 : 311-322.
  • 7Claude C, Carlton D R. A certificate revocation scheme for wireless ad hoc networks [C]//Proc of the 1st ACM Workshop Security of Ad Hoe and Sensor Networks. Fairfax, Virginia, 2003: 54-61.
  • 8Theel O. A general framework for modeling data replication sehemes[C]//Proe of the Int' 1 Workshop on Modeling, Analysis and Simulation of Computer and Telecommunication Systems (MASCOTS' 93). San Diego, CA: SCS and IEEE, 1993 : 347-250.
  • 9Agrawal D,EI-Abbadi A. An efficient solution to the mutual exclusion problem [J]. Proc of the ACM Trans. Comp. Sys. , 1991,9(1) : 1-20.
  • 10Bose p, Morin P. Online routing in triangulations [C]//Aggarwal A,Rangan C P,eds. Proc. of the 10th Int'l Syrup. on Algorithms and Computation (ISAAC). Chennai: Springer-Verlag, 1999 : 113-122.

引证文献4

二级引证文献11

相关作者

内容加载中请稍等...

相关机构

内容加载中请稍等...

相关主题

内容加载中请稍等...

浏览历史

内容加载中请稍等...
;
使用帮助 返回顶部