Extensible access control markup language (XACML) strategy assessment engine system based on various optimization mechanisms

Abstract

The invention provides an extensible access control markup language (XACML) strategy assessment engine system based on various optimization mechanisms. The problem that an existing XACML strategy assessment engine system cannot make a correct decision on access requests sent by a large number of users at the same time is solved. The system comprises an audit service (1), a strategy management service (2), a strategy decision service (3), a strategy persistence service (4) and an attribute assertion service (5). The audit service (1) records mutual information of the system. The strategy management service (2) provides a centralization type patterned strategic management platform. The strategy decision service (3) decides a user request. The strategy persistence service (4) provides a strategy storage function and a strategy search function. The attribute assertion service (5) provides an attribute storage function and an attribute search function. The system has the advantages of being high in assessment efficiency, small in matching computing amount, quick in matching speed and easy to integrate, the system can be used in distributed environment and can make the correct decision on the access requests sent by the large number of users.

Description

technical field [0001] The invention belongs to the technical field of network and information security, and relates to XACML policy evaluation technology in a distributed environment, specifically a system for improving the efficiency of XACML policy evaluation in a distributed environment, which can be used for cloud computing, social networks, Web services, etc. Make timely decisions on the access requests of a large number of users in a multi-mode environment. Background technique [0002] XACML (eXtensible Access Control Markup Language) is an extensible access control markup language. It was formulated by OASIS (Organization for the Advancement of Structured Information Standards) in February 2003 to determine the general access of user access requests. Control Strategy Description Language. As an access control policy description language, compared with other access control policy description languages, XACML has the characteristics of versatility, scalability, and p...

AI Technical Summary

Problems solved by technology

Although the XACML policy evaluation engine system with multi-level optimization technology proposed by Chinese scholar Wang Yazhe and others improves the efficiency of XACML policy evaluation, the system cannot guarantee that the cached content must be called frequently, and its XACML policy matching is still a string comparison , so the efficiency of XACML policy evaluation is low, and it cannot meet the requirements of making correct decisions in a timely manner for access requests sent by a large number of users simultaneously in distributed environments such as cloud computing and social networks.

Images