作者投稿和查稿 主编审稿 专家审稿 编委审稿 远程编辑

计算机工程 ›› 2006, Vol. 32 ›› Issue (16): 136-138,. doi: 10.3969/j.issn.1000-3428.2006.16.051

• 安全技术 • 上一篇    下一篇

基于属性证书的Web Services访问控制模型

金丽娜;蒋兴浩;李建华   

  1. 上海交通大学电子信息与电气工程学院,上海 200030
  • 收稿日期:1900-01-01 修回日期:1900-01-01 出版日期:2006-08-20 发布日期:2006-08-20

Access Control Model for Web Services Based on Attribute Certificate

JIN Li’na;JIANG Xinghao; LI Jianhua   

  1. School of Electronic Engineering and Information Technology, Shanghai Jiaotong University, Shanghai 200030
  • Received:1900-01-01 Revised:1900-01-01 Online:2006-08-20 Published:2006-08-20

摘要: Web Services的安全性已成为Web Services广泛应用的主要障碍,Web Services需要解决的安全问题包括:机密性,完整性,抗抵赖性,身份认证,授权和访问控制等。该文针对Web Services的授权和访问控制中存在的问题,提出了一种基于属性证书的Web Services授权机制并分析了利用属性证书实现Web Services角色访问控制的特点。

关键词: Web Services, 属性证书, 访问控制, PMI

Abstract: The security problem including confidentiality, integrity, nonrepudiation, authentication, authorization and access control has become the main obstacle for WS before its large scale application. This paper presents an attribute certificate based authorization mechanism for WS and analyzes the characteristics of access control model for WS aiming at the authorization and access control problem WS faces.

Key words: Web Services, Attribute certificate, Access control, PMI