网格环境下基于属性的访问控制策略合成研究

Study on composing attribute-based access control policies in grid

为了满足网格环境下资源聚合对访问控制策略合成的需求,达到建立统一的安全策略的目的,提出了一种扩展的基于属性的访问控制(ABAC)策略合成代数来实现安全策略的合成,该合成在策略表达式中引入了环境属性,并结合了一种新的策略合成算子实现访问控制策略的合成。用一个具体的策略合成案例展示了策略的合成,说明策略合成方法有良好的语义表达能力、灵活性以及可扩展性。

In order to meet the needs to composing access control policies by aggregation resources and achieve a unified security policy aim in grid,this paper proposed an extended composing algebra for ABAC policies to composing access control policies.It introduced the environment attribute in policy expression,and implemented composing access control policies with a new policy composition algebra.The policies composition with a specific case shows that this policies composition algebra provide a good semantic expression power,flexibility and scalability.