云计算环境下应用资源访问控制架构研究

Research on the Access Control Architecture of Application Resources in Cloud Computing Environment

针对私有云环境下应用资源访问控制问题,分析研究了用户权限定制、资源有效性管理以及授权动态调整等关键技术,提出了以专业服务为中心的访问控制架构。该架构对身份认证、用户信息、资源和授权服务的职责进行严格划分,运用面向服务的设计思想构建了专业化服务,统一了基于组织机构的用户管理和认证机制,通过资源的分层管理模式加深了数据、服务和软件的控制粒度,使得用户主体与资源主体分离,避免了授权管理控制的紧耦合问题,从而提高了动态性、灵活性,对云环境下同类项目的研究具有参考价值。

The paper, in terms of access control of application resources in the private cloud environment, makes an insightful analysis of such key technologies as customized user authority, effective resource management and dynamic authorization adjustment and proposes the professional service-centered access control architecture.This architecture places a rigid division of the responsibilities of identity authentication, user information, application resource and authorization; constructs, with the service-oriented design idea, professional services; unifies the organization-based user management and authentication mechanisms; tightens the control of data, service and software with the mode of fine-grained resource control.As a result,it realizes the separation between the user subject and resource subject, avoids the tight coupling of authorization management control, and improves the dynamics and flexibility of the system, which is of reference value to the similar researches in the cloud environment.