分布式应用中的访问控制规范的研究

针对分布式系统中安全服务规范给安全策略管理带来的不便,文章给出了一个针对分布式系统的访问控制策略设计和管理的访问控制模型,将此模型融入到分布式应用系统程序中,使用视图策略语言来描述访问控制策略,实现对安全访问策略行之有效的管理,并可以进行静态类型检测以保证规范的一致性。文章最后给出了分布式应用程序中执行VPL表示的访问控制策略的基础结构。

Research of Access Control Specification in Distributed Applications

Aiming to eliminate inconvenience of security policy management provided by security service specification in distributed system,this paper provides an access control model specifically designed to support the design and management of access control policies in distributed systems,which is integrated into distributed system applications.Access control policies can be described by view policy language.Security?access policies can be achieved?effective management,and can be type-checked statically?for the consistency of the specification.Finally,the paper provides the basic infrastructure used for enforcing access control policies described by VPL on distributed system applications.