%0 Journal Article
%T Study on Policy-based Access Control for Web Services<br>基于策略的Web服务访问控制研究
%A SHEN Hai-Bo
%A HONG Fan
%A <br>沈海波
%A 洪帆
%J 计算机科学
%D 2007
%I 
%X Access control to resources is one of the most important requirements to be satisfied in open,heterogeneous Web service environment.A Policy-Based Access Control(PABC)model is proposed,and PBAC is compared with Role-Based Access Control(RABC).The requeirements for policy language and policy management architecture in PBAC are analyzed.Based on eXtensible access control language(XACML)and attribute-based access control(ABAC)model,a policy-based access control approach is proposed in this paper.This approach satisfies the requirements of the interoperability,flexibility and scalability to the Web service environment.In the end,senmantic policy language is prospected.
%K Web service
%K Attribute-based access control
%K Policy
%K XACML<br>Web服务
%K 基于属性的访问控制
%K 策略
%K XACML
%U http://www.alljournals.cn/get_abstract_url.aspx?pcid=5B3AB970F71A803DEACDC0559115BFCF0A068CD97DD29835&cid=8240383F08CE46C8B05036380D75B607&jid=64A12D73428C8B8DBFB978D04DFEB3C1&aid=AF5C2F12F2C03FABDBB28F041D61EDF4&yid=A732AF04DDA03BB3&vid=339D79302DF62549&iid=94C357A881DFC066&sid=D767283A3B658885&eid=4DB1E72614E68564&journal_id=1002-137X&journal_name=计算机科学&referenced_num=0&reference_num=13