摘要： 在迁移工作流管理系统中，迁移实例的移动性导致了身份认证和访问控制的复杂性。该文给出一种基于Pass和Visa的迁移实例认证和访问控制模型，模型采用迁移实例拥有者为其颁发护照、接收者为其签证的双重签名策略。接收者通过对迁移实例携带护照和签证的认证，可以有效识别迁移实例的身份并对其实施访问控制。迁移实例拥有者可根据Visa证书链有效追踪迁移实例的移动历史。

关键词: 迁移工作流, 安全, Pass技术, Visa技术

Abstract: In migrating workflow management, identity authentication of migrating instance presents some complicated features owning to migration of migrating instance between sites continuously. Combined with certificate, this paper proposes an authentication model based on Pass and Visa, which applies mutual signature strategy by creator of migrating instance issuing Pass for it and destination issuing Visa. Based on authentication mechanism of migrating instance with Pass and Visa, the destination can recognize the identity of migrating instance efficiently and endow some permission with it. The owner of migrating instance can trace the history path based on Visa certificate chain.

Key words: migrating workflow, security, Pass, Visa

中图分类号: 

• TP393.08