一種基于XACML訪問控制機(jī)制的設(shè)計(jì)與實(shí)現(xiàn).pdf

1、華中科技大學(xué)碩士學(xué)位論文一種基于XACML訪問控制機(jī)制的設(shè)計(jì)與實(shí)現(xiàn)姓名：謝亦文申請(qǐng)學(xué)位級(jí)別：碩士專業(yè)：計(jì)算機(jī)應(yīng)用技術(shù)指導(dǎo)教師：胡和平20090522華中科技大學(xué)碩士學(xué)位論文華中科技大學(xué)碩士學(xué)位論文AbstractWiththedeepeningofenterpriseinfmationtechnologyenterpriseresourcesecurityhasbecomeoneofthemosturgentissues.Accessc

2、ontroliscriticalfthesecurityofthesystemresource.Thegoalofaccesscontrolistopreventuseraccessingthesystemresourceswithoutpermission.ThemechanismfeaturesoftraditionalaccesscontroltechnologyincludingDiscretionaryAccessContro

3、lMatyAccessControlRoleBasedAccessControlPolicyBasedAccessControlareanalyzedaswellastheiradvantagesdisadvantages.Enterprisescanusethesetechnologiestoprotecttheresources.Howeverbasedonactualbusinessrequirementsenterprisesh

4、avetheirownaccesscontrolbusinesslogicsodifferentmechanismsareimplementedbetweenthedifferentapplicationsoftware.Inthiscasetheaccesscontrolmodulecan’tsatisfythecommonuse.itisdifficulttoexchangeshareinfmationbetweendifferen

5、tapplicationsoftware.InviewoftheseshtcomingsoftraditionalaccesscontroltechnologyininfmationexchangeitmainlydiscussthedataflowmodelpolicylanguagemodelsofXACML(eXtensibleAccessControlMarkupLanguage).Adecisionmakingprocessi

6、sgiven.Itprovidesanewaccesscontroltechnologytoachievenotonlydifferentaccesscontrolideasbutalsoaptablestardwayofcarryingdifferentbusinesslogics.ThemainpurposeofXACMListosolvetheproblemsofdisparitiesarbitraryinexpressingau

7、thizationpoliciestoestablishgeneralrulesofaccesscontrollanguage.BasedontheanalysisofexistingachievingmechanismofaccesscontroltechnologymodelotherapplicationsofXACML.AfterthataXACMLbasedaccesscontrolmechanismisgiven.Itslo

8、gicdesignofvariouscomponentsinourmechanismisexplicatedindetailsincludingPolicyadministrationpointPolicydecisionpointPolicyenfcementpointPolicyinfmationpointaswellasthemodulefunctionwkflow.itisdevelopedbyJAVAlanguagewiths