论文部分内容阅读
Web服务具有开放性、高度动态性、松散耦合性及跨平台性等特点,传统的访问控制方式已不能满足其跨域访问的安全需求。通过集成信任管理及可信平台度量扩展了XACML访问控制模型,提出基于信任度量的跨域访问控制模型。该模型在对用户统一身份认证的基础上,通过分析用户历史访问行为,引入用户信任度、平台配置完整度和域间信任度,提高了跨域访问控制的动态性和安全性。同时,给出了域内信任度管理点和跨域信任度管理点两个功能模块的具体实现描述,采用信任度缓存实时更新的方法分析了海量历史访问行为的复杂度问题,提高了系统效率。
Web services are open, highly dynamic, loosely coupled and cross-platform features, the traditional access control methods can no longer meet the security needs of its cross-domain access. Extends the XACML access control model through integrated trust management and trusted platform metrics, and proposes a cross-domain access control model based on trust metrics. Based on unified user authentication, this model improves the dynamic and security of cross-domain access control by analyzing user’s historical access behavior and introducing user trust, platform configuration integrity and inter-domain trust. At the same time, two functional modules of trust management point and cross trust management point are given, and the complexity of massive historical access behavior is analyzed by using trust cache real-time updating method to improve the system efficiency.