| Grid technology's revolutionary method of resource sharing integrates all the resources to a coondinated union, makes people get an integrated ability of all resources transparently and grab the right information in need. This meets the idea of warfare integration in military field. So, there comes the military grid. But grid also brings new chanllenges to security. Rearch on the efficient mechanism to support the interoperability for frequent cross-domain access in military grid become more and more important. Around this issue, the detailed content of this paper shows as follows:1. Through the analysis with the grid architecture and the characteristics in the military field, this paper designs a military grid's architechture based on web service and an authorization model match with it. The model based on web service and VO structure, in which the authorization policy language is the crucial part, aims at supportting the interoperability for heterogeneous authorization mechanisms in the grid environment.2. With the help of logic's formal description and deduction abilities, an authorization policy language—APL, is designed in this paper. In a formal way, this paper presents a symbol set and a predict set, based on analysis of the types, attributes and relationships of grid entities, and defines its atoms and rules based on this to build an authorization policy language, which provides a unified makeup and execution for cross-domain and cross-platform authorization rules under grid environment.3. This paper shows its semantics and syntax in detail, proves their soundness and completeness and then gives an evaluation algorithm for authorztion queries based on the sound and complete formal system. And an XML implementation for the language is discussed in this paper.4. This paper makes a research about a typical grid application instance to show the use and application of our authorization policy language and authorization model in a typical grid access. |
PDF Full Text Request