摘要： 针对Internet上经常使用的分层式资源管理模型，提出一种基于属性的访问控制模型HR_ABAC，采用XACML国际标准作为该模型的策略描述语言，研究实现基于属性的访问控制决策机制。对该决策机制进行测试与分析，结果表明所实现的基于属性的访问控制方法具有有效性和实用性。

关键词: 基于属性的访问控制, 可扩展访问控制标记语言, 策略决策点, 策略管理点

Abstract: This paper presents an Attribute Based Access Control(ABAC) model HR_ABAC for hierarchical resource model which is commonly used in Internet. An access control decision mechanism is proposed and implemented for this model by using eXtensible Access Control Markup Language(XACML). It tests and analyzes this decision mechanism, and result indicates the mechanism is valid and practical.

Key words: Attribute Based Access Control(ABAC), eXtensible Access Control Markup Language(XACML), policy decision point, policy administration point

中图分类号: 

• TP393.08