Research and implementation of mandatory access control model based on SOA
Guangming Tang · Jisuanji gongcheng yu sheji · 2011
Using web service technology,taking TOMCAT as a platform,a SOA prototype system is created,which contains service provider,service users and service registry.Based on the BLP model,a mandatory access control model is designed under the SOA,and the policy of multilevel security is used.Combined with the technologies of security such as XML encryption/decryption and SOAP expansion,client security agent module and XML security agent gateway module is proposed and designed.The system's control point is put forward,and the access control is done to the service resources and users.The architecture can fulfill the character of SOA security perfectly.