主动网安全授权机制的设计

An Authorization Mechanism for Active Networking

以可编程交换机方案 [1]为基础，以主动网络的节点安全为出发点，设计了一种主动网安全授权机制。设计要点包括划分资源对象，定义对象操作集，建立层次化授权与用户管理结构，实现权限分级与授权自动委托以及利用加密、摘要与签名算法保证授权的正确性和完整性。

In this article, a security mechanism based on SwitchWare Architecture is devised to deal with the implementing, authenticating and auto entrusting problems of the authorization. The main points include dividing resources into objects, defining operation set for each object, setting up hierarchy for authorization and user administration, implementing auto entrusting and using encryption, digest and digital signature to ensure the correctness and integrity of authorization.