摘要
为实现网格中安全策略的动态生成,提出了基于访问控制策略集自动组合的方法。虚拟组织根据网格服务组合约束,建立相关自治域访问控制策略集的组合关系。利用代数集合理论实现策略集的组合运算,通过自动组合引擎和组合触发规则,实现访问控制策略集的自动组合,生成虚拟组织内的访问控制策略集。由于自动组合后的策略集存在冗余子集和操作权限冲突,提出了操作权限自动合并方法和冲突解决办法,并提出了自动组合算法。经分析证明,该方法在网格环境下具有较强的灵活性和动态适应性。
To realize dynamic generation of the access control policies and improve the dynamic adaptability of authorization verification for requester in grid, the automatic composition scheme for access control policy set in grid was put forward. According to the services composition constraints, the composition relationships of policy set for au tonomous domains of Virtual Organization （VO） was constructed. The theory of algebra set was used to implement composition and computing for the policy set. And the automatic composition for policy set was realized by means of automatic composition engine and automatic trigger rules, and the access control polices set in VO was therefore generated. As there might be conflicts and redundancy policy subset in composed polices set,a method to resolve conflicts and automatic permission combination was proposed. The automatic composition algorithm was also presented. By analysis and implementation of the scheme, it was demonstrated that the scheme was with higher flexibility and dynamic adaptability.
出处
《计算机集成制造系统》
EI
CSCD
北大核心
2009年第5期1023-1030,共8页
Computer Integrated Manufacturing Systems
基金
教育部新世纪优秀人才支持计划基金资助项目(NCET-04-0843)
重庆市自然科学基金资助项目(2005BB2192)~~
关键词
网格
虚拟组织
访问控制
策略集
自动组合
权限合并
grid
access control
virtual organization
policy set
automatic composition
permission combination
