教学网格门户访问控制研究

教学网格门户能有效地改善网络教学环境,提高校园网资源的利用率。一个有效满足最小特权原则的访问控制机制必不可少。坚持最小特权原则,要不断调整用户权限,适应当前情况。为教学网格门户提出一种上下文感知的访问控制机制,建立在网格安全基础设施提供的安全机制上,增强安全性。提供紧凑、准时的权限,使授权用户能依环境访问特定对象。上下文的不断变化引发权限的持续调整,从而减少执行任务期间损害信息完整性的风险。

Research into Access Control of Teaching Grid Portal

Teaching grid portal can effectively improve network teaching environment and campus network resources utilization. Providing an effective access control mechanism that meets the requirement of the least privilege principle is essential. Adherence to the least privilege principle requires continuous adjustments of user permissions in order to adapt to the current situation. This paper presents a context-aware access control mechanism for the teaching grid portal. The proposed mechanism builds upon and enhances security mechanisms provided by the Grid Security Infrastructure. It provides tight, just-in-time permissions so that authorized users get access to specific objects according to the current context. These permissions are subject to continuous adjustments triggered by the changing context. Thus, the risk of compromising information integrity during task executions is reduced.