Access control policies composition for composite Web services

doi:10.3724/SP.J.1087.2012.03430

Journal of Computer Applications ›› 2012, Vol. 32 ›› Issue (12): 3430-3434.DOI: 10.3724/SP.J.1087.2012.03430

• Information security • Previous Articles Next Articles

Access control policies composition for composite Web services

¹,²,ZHANG Hong-qi³,⁴,Zhi-yu REN¹,³, ¹,³

1.
2. Henan Province Key Laboratory of Information Security,Zhengzhou Henan 450004,China
3. Information Engineering University, Zhengzhou Henan 450004,China
4. Henan Province Key Laboratory of Information Security, Zhengzhou Henan 450004, China

Received:2012-06-22 Revised:2012-08-06 Online:2012-12-29 Published:2012-12-01

组合Web服务访问控制策略合成研究

姜皇勤¹,²,张红旗¹,²,任志宇¹,²,单棣斌¹,²

1. 河南省信息安全重点实验室, 郑州 450004
2. 信息工程大学, 郑州 450004

通讯作者: 姜皇勤
作者简介:姜皇勤（1987-），男，四川眉山人，硕士研究生，主要研究方向：访问控制、身份认证；〓张红旗（1962-），男，河北遵化人，教授，博士生导师，博士，主要研究方向：授权管理、等级保护、网络安全；〓任志宇（1974-），女，河南汤阴人，讲师，博士研究生，主要研究方向：授权管理；〓单棣斌（1982-），男，河北邯郸人，讲师，硕士，主要研究方向：身份认证。
基金资助:
国家973计划项目;河南省科技创新人才计划项目

Abstract

Abstract: For access control policy composition problem of composite services in Web services multi-domain environment, the attribute based Web services access control policy description framework was proposed and the services access control policies were formally expressed with atomic attribute value constraint. After analyzing the control structures in services composition description document, combing the access control policy composition operators and access control policy rule composition operation, the composite Web services access control policies composition method was designed to compose the composite service access control policies. Finally, the Web services access control policy composition process was given and the practicability of composition method was verified by a case.

Key words: Web services, services composition, access control, attribute, policies composition

摘要： 针对Web服务多域环境下组合服务的访问控制策略合成问题，首先提出基于属性的Web服务访问控制策略描述框架，并结合原子属性值限制的属性描述方法，对服务访问控制策略进行了形式化表达。然后，通过分析服务组合描述文档中的控制结构，并研究访问控制策略合成算子和访问控制策略规则的合成运算，提出组合Web服务访问控制策略合成方法，实现了组合服务访问控制策略的合成。最后，结合实例给出组合Web服务的访问控制策略合成流程，验证了合成方法的实用性。

关键词: Web服务, 服务组合, 访问控制, 属性, 策略合成

CLC Number:

TP393.08

ZHANG Hong-qi Zhi-yu REN. Access control policies composition for composite Web services[J]. Journal of Computer Applications, 2012, 32(12): 3430-3434.

姜皇勤张红旗任志宇单棣斌. 组合Web服务访问控制策略合成研究[J]. 计算机应用, 2012, 32(12): 3430-3434.

[1]	Xin LI, Qiao MENG, Junyi HUANGFU, Lingchen MENG. YOLOv5 multi-attribute classification based on separable label collaborative learning [J]. Journal of Computer Applications, 2024, 44(5): 1619-1628.
[2]	Xin LI, Liyong BAO, Hongwei DING, Zheng GUAN. MAC layer scheduling strategy of roadside units based on MEC server priority service [J]. Journal of Computer Applications, 2024, 44(4): 1227-1235.
[3]	Meihong CHEN, Lingyun YUAN, Tong XIA. Data classified and graded access control model based on master-slave multi-chain [J]. Journal of Computer Applications, 2024, 44(4): 1148-1157.
[4]	Gaimei GAO, Jin ZHANG, Chunxia LIU, Weichao DANG, Shangwang BAI. Privacy protection scheme for crowdsourced testing tasks based on blockchain and CP-ABE policy hiding [J]. Journal of Computer Applications, 2024, 44(3): 811-818.
[5]	Haifeng MA, Yuxia LI, Qingshui XUE, Jiahai YANG, Yongfu GAO. Attribute-based encryption scheme for blockchain privacy protection [J]. Journal of Computer Applications, 2024, 44(2): 485-489.
[6]	Jing LIANG, Wunan WAN, Shibin ZHANG, Jinquan ZHANG, Zhi QIN. Traceability storage model of charity system oriented to master-slave chain [J]. Journal of Computer Applications, 2024, 44(12): 3751-3758.
[7]	Keshuo SUN, Haiying GAO, Yang SONG. Multi-authority attribute-based encryption scheme for private blockchain over public blockchain [J]. Journal of Computer Applications, 2024, 44(12): 3699-3708.
[8]	Gaimei GAO, Mingbo DUAN, Yaling XUN, Chunxia LIU, Weichao DANG. SM9-based attribute-based searchable encryption scheme with cryptographic reverse firewall [J]. Journal of Computer Applications, 2024, 44(11): 3495-3502.
[9]	Huan ZHANG, Jingyu WANG, Lixin LIU, Xiaoyu JIANG. Multi-organization collaborative data sharing scheme with dual authorization [J]. Journal of Computer Applications, 2024, 44(10): 3307-3314.
[10]	Haiying MA, Jinzhou LI, Jikun YANG. Blockchain-based decentralized attribute-based encryption scheme for revocable attributes [J]. Journal of Computer Applications, 2023, 43(9): 2789-2797.
[11]	Jinghong WANG, Zhixia ZHOU, Hui WANG, Haokang LI. Attribute network representation learning with dual auto-encoder [J]. Journal of Computer Applications, 2023, 43(8): 2338-2344.
[12]	Jiaming HE, Jucheng YANG, Chao WU, Xiaoning YAN, Nenghua XU. Person re-identification method based on multi-modal graph convolutional neural network [J]. Journal of Computer Applications, 2023, 43(7): 2182-2189.
[13]	Jingchao CHEN, Shugong XU, Youdong DING. Text image editing method based on font and character attribute guidance [J]. Journal of Computer Applications, 2023, 43(5): 1416-1421.
[14]	Meng CAO, Sunjie YU, Hui ZENG, Hongzhou SHI. Hierarchical access control and sharing system of medical data based on blockchain [J]. Journal of Computer Applications, 2023, 43(5): 1518-1526.
[15]	Xiaoyan ZHANG, Jiayi WANG. Comparison of three-way concepts under attribute clustering [J]. Journal of Computer Applications, 2023, 43(5): 1336-1341.

Access control policies composition for composite Web services

组合Web服务访问控制策略合成研究

PDF

Knowledge

Abstract

Cite this article

share this article

References

Related Articles 15

Recommended Articles

Metrics