节点文献
网格计算中一种基于属性的访问控制方法
Attribute-based access control method in grid computing
【摘要】 为了迎合目前网格计算对动态、细粒度授权的需求,针对网格资源分层式的组织结构特点,在现有的基于属性的访问控制(ABAC)模型的基础上,提出了一种针对网格资源的ABAC模型Grid_ABAC,并设计了基于XACML的Grid_ABAC实现框架,应用在GT4平台上。最后对GT4中的应用作了测试,测试结果表明授权结果与预期结果相同,且时间开销随着规模的增长并没有增长很多,在可接受范围内。证明Grid_ABAC模型在网格平台上具有一定的实用性。
【Abstract】 In order to satisfy the grid’s need for dynamic and fine-grained authorization policy,this paper presented a model named Grid_ABAC for grid computing.This model based on the layed structure of grid resources and the current ABAC model.Also designed implementation architecture of Grid_ABAC with XACML and used it in GT4 platform.At last,made a test in Globus platform.The result shows that the authorization result is identical to the expected result and the time cost doesn’t increased apparently with the increase of test scope.Grid_ABAC model is valid in grid platform.
【Key words】 grid computing; Globus platform; attribute-based access control; XACML;
- 【文献出处】 计算机应用研究 ,Application Research of Computers , 编辑部邮箱 ,2010年02期
- 【分类号】TP393.08
- 【被引频次】6
- 【下载频次】247