服务集成总线中基于属性的策略服务的研究

摘要

In order to enhance the mediating ability of Service Integration Bus and promote the service quality of Service Oriented Architecture and guarantee the safety of Distributed System,a lot of work and extensions have been done on extensible Access Control Markup Language which can be used to specify not only access control policy but also route selecting policy.Considering access control policy and route selecting policy,an Attribute-Based Policy Service has been designed for SIB which will have the ability of smart routing and access control.Furthermore,an improved model of Policy Repository has been put forward to increase the efficiency of policy decision.%为了增强服务集成总线的中介能力,提高面向服务架构的服务质量,保证分布式系统的安全性,对可扩展访问控制标记语言进行了研究及拓展,使其不仅可以描述访问控制策略,也可以应用到路由选择策略,进而设计了SIB中的基于属性的策略服务,着重考虑访问控制策略和路由选择策略,使SIB具有智能路由能力和访问控制能力.在此基础上,为处理大规模策略存储的情况,提出了一套改进的策略库模型,提高策略判定效率.