Research of federation access control profile model based on web services
Yafen Li · Jisuanji gongcheng yu sheji · 2011
For the complex self-domains across different application requirements,the model IRBAC2000 is researched,and a combined access control model is presented.The main form of the model is implemented on web service.It extends IRBAC2000 access control model,reforms R-R role mapping concept,increases constraints of role mapping,advances an arithmetic of authority-conflict and makes use of extensible policy language SAML and XACML to describe access control policy.At last the practicability of the model is verified on the existing system and some problems to solve next step are solved.