P2P网络访问控制模型的研究.pdf

P2P 网络访问控制模型的研究 Abstract P2P technology makes resources in network utilized adequately and shared best, and has attracted more and more users to participate in. The original intention of P2P application is to promote information sharing, thus the information security is considered little, and the research on access control lags the development of P2P technology. Along with the applications of P2P become more and more extensive, supporting a universal and high-effective access control model is the key to guarantee P2P system to become effective and steady. Existing access control model in P2P networks is scarce and lack general characteristic, based on it this paper investigate several classical access control model, select the Role-Based Access Control model to improve, and construct a scalable access control model XRBAC which is based on policy language. In this paper, the policy format of XRBAC is designed by the standard of eXtensive Access Control Markup Language. XRBAC model retains the characteristic of policy-neutrality in RBAC, adopt XACML standard to ensure general characteristic of policy specification. To solve the problem of conflict between the decentralized characteristic of P2P networks and the centralized management in RBAC, XRBAC combines centralized user-role assignment and decentralized permission assignment, and adds direct and negative authorization; all these bring flexibility to permission assignment. In this paper the XRBAC model is described by XACML technology, and the rules described by XACML are realized by Java language. At last policy examples are designed to be test, the result indicates XRBAC modle constructed by this pape