Grid visit control method based on extendible markup language security policy

Abstract

The invention provides a grid visit control method based on an extendible markup language security policy, which aims at solving the problems of dynamics and span of different security domains in the grid calculation visit control process. The method comprises the following methods: limiting security domains on roles; defining the role inheriting relationship between different security domains; attaching the roles of the self domain to the roles of other domains through the authorized agency service to establish the role inheriting relationship between the domains; and giving corresponding resolutions for possibly meeting role inheriting relationship conflicts. The invention carries out the extension on the basis of a standard RBAC model, and gives a role visit control model based on the context through introducing two context mechanisms: main events and object events, the model can realize the dynamic authorization process, and formally describes the concrete realization process of the role state change caused by the main events and the permission state change caused by the object events, and at the same time, the analysis on the consistency in the state conversion process shows that the model maintains the consistency in the state conversion process.

Description

technical field [0001] The invention is a security solution for distributed computing. It is mainly used to solve the problem of access control in the grid environment, and belongs to the field of distributed computing software security technology. Background technique [0002] Grid Computing refers to linking scattered hardware, software, and information resources into a huge whole through a high-speed network, so that people can use geographically scattered resources to complete various large-scale tasks. complex computing and data processing tasks. Compared with previous concepts such as cooperative work and distributed computing, grid computing is more integrated, more convenient to use, and more fully and effectively utilized resources. It marks a new and higher level of modern information technology application. [0003] Security is one of the key issues of grid computing technology, especially with the commercial development and popularization of grid technology, t...

AI Technical Summary

Problems solved by technology

[0006] Technical problem; The purpose of the invention is to solve the dynamics involved in the grid computing access control process and the problems across different security domains

Images