• 主题
高级搜索  >
历史搜索 清空历史
首页> 外文会议>Proceedings of the IASTED international conferences on informatics 2010 >AN ACCESS CONTROL MODEL BASED ON LANGUAGE THEORY FOR SERVICE ORIENTED ARCHITECTURE
【24h】

AN ACCESS CONTROL MODEL BASED ON LANGUAGE THEORY FOR SERVICE ORIENTED ARCHITECTURE

机译：基于语言理论的面向服务体系结构访问控制模型

获取原文
获取原文并翻译 | 示例
页面导航
  • 摘要
  • 著录项
  • 相似文献
  • 相关主题

摘要

Although the Service Oriented Architecture (SOA)rnconcept has been accepted by many companies andrnorganizations, it is still facing the existing challenges inrnsecurity requirements and problems. One of the disputedrnsecurity aspects in this architecture is Access Control. Inrnthis article, not only, are we trying to show the problemsrnof traditional access control models when encountered byrnbasic principles of SOA, but also, we are going to presentrna new language based access control (LBAC) that uses thernconcepts of languages and set theory as its formal bases.rnIn this model an access language will be defined for eachrnresource of organization consisting of functions andrnservices, and a language will be assigned to each subject.rnThen, using its fundamental authorization rule, the modelrnonly allows the access to subjects that have a string of thernlanguage of requested resource. Using a sample scenario,rnwe will show that proposed model can achieve the mainrngoal of access controls which is making correct decisionsrnabout issuing permissions. Furthermore, this model showsrnbetter conformity with primitives such as interoperability,rncomposeability and encapsulation from the security pointrnof view. A small scaled implementation has also beenrnpresented.
机译：尽管面向服务的体系结构（SOA）的概念已为许多公司和组织所接受，但它仍面临安全要求和问题方面的现有挑战。此体系结构中有争议的安全性方面之一是访问控制。在本文中，我们不仅要尝试展示SOA的基本原理遇到的传统访问控制模型的问题，而且，我们还将介绍使用语言概念和集合论作为基础的基于语言的新访问控制（LBAC）。正式基础。在此模型中，将为由功能和服务组成的每个组织资源定义访问语言，并将语言分配给每个主题。然后，使用其基本授权规则，该模型仅允许访问具有字符串的主题所请求资源的语言。通过使用示例场景，我们将证明所提出的模型可以实现访问控制的主要目标，而访问控制对于发布许可做出了正确的决策。此外，从安全性角度来看，该模型还显示出与原语的更好一致性，例如互操作性，可组合性和封装性。还提出了一个小规模的实施方案。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱：kefu@zhangqiaokeyan.com

京公网安备：11010802029741号 ICP备案号：京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有

  • 客服微信

  • 服务号