基于多用户的Windows Azure平台下的访问控制模型的设计

Design of an Access Control Model Based on Multi-User Windows Azure Platform

在微软提出的Window Azure平台模型上,对传统的访问控制模型进行了分析,发现传统的访问模型缺乏灵活性,难以适应动态变化的特点。本文针对微软的云计算模型,提出了面向多用户的访问控制模型,在模型中采用了用户层和平台层两种表示方法,在用户层中对用户、角色、任务、权限进行了重新定义,在平台层中针对用户层定义在用户登录,权限访问控制以及权限管理三个部分进行细化。仿真实验表明,本文的模型相比于传统的角色-任务模型在访问数量,任务平均完成时间,访问失败率具有一定优越性。

In this paper, based on the Windows Azure platform presented by Microsoft, the traditional access control model is analyzed, and it is found that the traditional access model lacks flexibility and hard to meet the requirement of dynamic change. Aiming at the Microsoft’s cloud computing model, a multi-user access control model is presented in this paper. And in the model two expressions are adopted---- user layer and platform layer. In the user layer, the user, role, task and access are redefined. And in the platform layer, on the basis of the definition, the three parts of user logging, access control and access management are segmented. Through simulation experiments, the model presented in this paper, compared to the traditional role-task model, is superior in its access number, average task completion time and access failure rate.