摘要： Web服务的一个显著特点是在于它们能够被互联网上的用户方便地访问。但这种方便带来了安全性的隐患。该文提出了一个适合Web服务的访问控制系统模型。基于属性证书的使用，采用XACML作为描述访问控制准则的语言。系统充分利用了Web服务支持XML和XACML的特点，集成了权限管理基础设施和XACML，使自身适合各种异构的Web服务。

关键词: Web服务, 可扩展标记语言, 可扩展访问控制标记语言, 权限管理基础设施, 访问控制

Abstract: One of the most important features of XML Web services is that they can easily accessed over the Internet. But the downside of this easiness is that security is compromised. This paper presents an access control system for Web Services. It uses XACML for the description of access control criteria based on the use of attribute certificate. The system takes full advantage of XML-enabled feature of Web Services and XACML access control decision model. Furthermore, the integration of privilege management infrastructure and XACML makes this system suitable for heterogeneous Web services.

中图分类号: 

• TP393.08