Web Services中基于信任的动态访问控制

Trust-based dynamic access control in Web Services

在Web Services系统中,用户行为的动态不确定性,使得现有的访问控制模型难以控制用户的恶意行为。针对这一问题,提出一种基于信任的动态访问控制模型。该模型将安全断言标记语言和可扩展的访问控制标志语言相结合,并采用了一种基于忠诚度的信任度计算方法。仿真结果显示,该访问控制方式能有效地遏制恶意行为,实现访问控制的动态性,具有较好的通用性、灵活性和可扩展性。

In Web Services system,dynamic nondeterministic user behavior makes the present access control model difficult to control user malicious behavior.So this paper proposed an access control model based on trust,which combined the security assertion markup language and extensible access control markup language,and adopted a confidence computing method based on loyalty as well.The result of simulation shows that access control method,which effectively prevents malicious behavior to realize dynamic access control,is universal,flexible and extensible.