分布安全代理体系及其授权访问控制机制的设计与实现计算机应用技术专业论文.docxVIP

硕士论文 硕士论文 分布安全代理体系及赣授权访弼控制机制的设计与实现 摘要 随满网络应用的蒋及，出现了大嚣的网络数甥资源(如文摘库、论文全文库、 援寨资秘疼、业务数爨痒等等)梵帮些购买这蛰资源戆极构熬特定震户黢务。为 了使机构在可以最大辗度的方便所满用户使用瀵些资源的同时，又能够实施自己 的安全策略控制这些用户的访问，本文设计实现了一个由一系列分布部署、提供 逆向代瑕服务的安全代理服务嚣秘对这些代理服务实施集中管理的管理中心组 残静努帮安全饩毽钵琴，及瘟爰予该体系孛豹蘩予SAML麓范霹XACML甄范 的分布授权访问控制机制。 文中结合对业务助能需求的分析，设计了分布安全代理体系的体系结构和业 务流程；在分辑现鸯豹授权帮访阔控零《模型的傀缺点豹基疆上，遥过改逶髂系结 构的设计和重构策酶获取更新流稷，设计了一个商效的、可以分布实施灵活的访 问控制懿略的分布授权访问控制机制，和应用乎分布安全代理体系中各种不问场 景下的避作漉程；提出了分布安全代理体系及篡授权访闯控制帆制的实现方案， 最终稳戆了一夸支持Single Sign-On，支葑对钱骧簸务送雩亍集审酝置警毽鞠集中 监控，W以根据统一篱理、分布实施的资源访问壤略对用户的访问进行分布授权 和灵活的访问控制的W曲应用体系框架。 本文懿醑究成暴爨被应蘑于中瓣院数字图书镶《分毒移动瘸户使用餐理技术 平台研究与建设》凑鞭工程中，满足了实际需求。 关键试： 安众声明标记谮畜 可扩熙的访问控制标记语言 分布授权 访问控 制安全代理 硕士论文 硕士论文 分布安全代理体系及其授权访问控制机制的设计与实现 Abstract With the popularization of the network applications，large numbers of network resources have been published to serve users of the enterprises which have been subscribed the resources’services．In order to enable those enterprises to control how their employees use these resoBlce according to the security policies，and provide a flexible service to enable their users to access the resources conveniently,a distributed secure proxy framework consists of a batch of secure proxies and a centralized administrative center，and a distributed authorization and access control architecture based on SAML and XACML technology which is applied in this framework have been implemented in this paper． In this paper,The System structure and the business flow of the distributed secure proxy framework has been presented according to the analysis of the requests． A high—efficient distributed authorization and access control architecture has been provided based on the analysis of the advantages and problems of some existing authorization and access control models，to support enforcing flexible access control according to the policies built in a centralized center,A business flow of enforcing authorization and access control on the distributed secure proxy service has been designed to support