摘要
为解决网格环境中域间互操作时基于属性的访问控制(attribute based access control,ABAC)策略之间的语义异构问题,提出一种利用属性语义信息辅助域间安全策略表示的方法。根据主客体及环境属性的多样性和二义性等特点,对EduPerson规范、SAML属性轮廓、QoS测度等领域知识进行分析,并构建出SHIQ(D)描述逻辑的通用属性本体UniAttOnt。在此基础上,给出了利用本体知识使用属性语义信息辅助属性一致性检测和策略表示等的具体方法,最后的实例分析表明了该方法的可行性。
To solve the heterogeneous semantic problems of the ABAC policies in grid environment,a method to assist the security policy representation using semantic attribute information between domains is proposed. Based the diversity and ambiguity feathers of the subject,object and environment attributes,the EduPerson specification,SAML attribute profile and QoS measures are analyzed and the universal attribute ontology UniAttOnt based on the SHIQ （D） description logic is constructed. Based on these,the concrete methods to assist the attribute consistency check and policy representation utilizing ontology knowledge and semantic attribute information are provided. Finally,a case study is showed to verify the feasibility of the method.
出处
《计算机工程与设计》
CSCD
北大核心
2010年第14期3174-3176,3184,共4页
Computer Engineering and Design
基金
国家863高技术研究发展计划基金项目(2006AA01Z457)
