一種基于XACML訪問控制機制的設(shè)計與實現(xiàn).pdf

1、華中科技大學(xué)碩士學(xué)位論文一種基于XACML訪問控制機制的設(shè)計與實現(xiàn)姓名：謝亦文申請學(xué)位級別：碩士專業(yè)：計算機應(yīng)用技術(shù)指導(dǎo)教師：胡和平20090522華中科技大學(xué)碩士學(xué)位論文華中科技大學(xué)碩士學(xué)位論文AbstractWiththedeepeningofenterpriseinfmationtechnologyenterpriseresourcesecurityhasbecomeoneofthemosturgentissues.Accessc

2、ontroliscriticalfthesecurityofthesystemresource.Thegoalofaccesscontrolistopreventuseraccessingthesystemresourceswithoutpermission.ThemechanismfeaturesoftraditionalaccesscontroltechnologyincludingDiscretionaryAccessContro

3、lMatyAccessControlRoleBasedAccessControlPolicyBasedAccessControlareanalyzedaswellastheiradvantagesdisadvantages.Enterprisescanusethesetechnologiestoprotecttheresources.Howeverbasedonactualbusinessrequirementsenterprisesh

4、avetheirownaccesscontrolbusinesslogicsodifferentmechanismsareimplementedbetweenthedifferentapplicationsoftware.Inthiscasetheaccesscontrolmodulecan’tsatisfythecommonuse.itisdifficulttoexchangeshareinfmationbetweendifferen

5、tapplicationsoftware.InviewoftheseshtcomingsoftraditionalaccesscontroltechnologyininfmationexchangeitmainlydiscussthedataflowmodelpolicylanguagemodelsofXACML(eXtensibleAccessControlMarkupLanguage).Adecisionmakingprocessi

6、sgiven.Itprovidesanewaccesscontroltechnologytoachievenotonlydifferentaccesscontrolideasbutalsoaptablestardwayofcarryingdifferentbusinesslogics.ThemainpurposeofXACMListosolvetheproblemsofdisparitiesarbitraryinexpressingau

7、thizationpoliciestoestablishgeneralrulesofaccesscontrollanguage.BasedontheanalysisofexistingachievingmechanismofaccesscontroltechnologymodelotherapplicationsofXACML.AfterthataXACMLbasedaccesscontrolmechanismisgiven.Itslo

8、gicdesignofvariouscomponentsinourmechanismisexplicatedindetailsincludingPolicyadministrationpointPolicydecisionpointPolicyenfcementpointPolicyinfmationpointaswellasthemodulefunctionwkflow.itisdevelopedbyJAVAlanguagewiths