云计算中基于SLA的服务可信协商与访问控制策略

针对当前云计算中因服务提供者(SP)的信任保障机制缺失而容易被不可信服务消费者(SC)滥用的现象,提出面向SC实体的服务可信协商及访问控制策略.该策略首先依据系统信任规则来表达服务实体的可信程度,然后通过求解SC实体的直接和间接信任推理空间建立信任证据的举证方法,同时采用服务级别协议(service level agreements,SLA)构建交互双方的协商机制,最后综合信任传递与迭代计算策略,确定服务交互的SLA等级,提供相应级别的服务,从而达到访问控制的目的.理论分析与实验结果表明,该方法虽少量增加了协商的次数,但能较好解决服务被滥用以及利用率不高的问题,为云计算环境下信任协商研究提供一种有效的新方法.

A service trust negotiation and access control strategy based on SLA in cloud computing

The paper is concerned with the problem that the service is easily abused by dishonesty SC(service consumer)because of the lack of trust security mechanism for SP(service providers)in current cloud computing environment.A trust negotiation and access control strategy of SC Oriented is proposed in this paper.Firstly, the credible degree of services entity is expressed by the system trust rule in this strategy.Secondly,quoted method of trust evidence is established through solving the direct and indirect trust reasoning domains of service entity,and the negotiation mechanism of mutual sides is designed through SLA(service level agreements).Finally, the methods of trust transfer and iterative calculation are synthesized for ascertaining the SLA level of service intercommunion between SP and SC entity,and providing corresponding levels of service.It may achieve the purpose of service access control.Theoretical analysis and experimental results indicate that the method may increase the times of both sides negotiation,but can better resolve the problems of current service abused and low utilization.It is a new effective method for the study of trust consultation in cloud computing environment.