本文選題：WoT　切入點(diǎn)：用戶多角色　出處：《小型微型計(jì)算機(jī)系統(tǒng)》2017年04期 　論文類型：期刊論文

【摘要】：OAuth(Open standard for Authorization)是一種基于Web的用于開(kāi)放授權(quán)的互聯(lián)網(wǎng)標(biāo)準(zhǔn)協(xié)議,在眾多基于Web的應(yīng)用平臺(tái)中得到廣泛應(yīng)用,但是該機(jī)制應(yīng)用在WoT架構(gòu)下時(shí)面臨許多挑戰(zhàn).其一,在OAuth協(xié)議的應(yīng)用場(chǎng)景中,一般不會(huì)出現(xiàn)用戶作為部分資源的擁有者,同時(shí)又作為其他資源的使用者的情況,所以O(shè)Auth協(xié)議不能適應(yīng)WoT架構(gòu)下用戶多角色的特點(diǎn).其二,OAuth協(xié)議本身并沒(méi)有提供流量控制功能,而在WoT架構(gòu)下泛在資源供應(yīng)者需要通過(guò)流量控制來(lái)防止用戶進(jìn)行惡意訪問(wèn).本文新提出了一種WoT架構(gòu)下面向多角色用戶的資源訪問(wèn)控制方法,解決了現(xiàn)有協(xié)議不能滿足WoT架構(gòu)下用戶具有多種角色的特性,并且可以滿足資源提供者進(jìn)行流量控制的要求.
[Abstract]:OAuth(Open standard for Authorization is an Internet standard protocol for open authorization based on Web, which is widely used in many Web based application platforms. However, it faces many challenges when it is applied in WoT architecture. In the application scenario of OAuth protocol, there is generally no user as the owner of part of the resource, but also as the user of other resources. Therefore, the OAuth protocol can not adapt to the characteristics of multi-role users under the WoT architecture. Secondly, OAuth protocol itself does not provide flow control functions. In the WoT framework, the ubiquitous resource providers need to prevent malicious access through flow control. In this paper, a new resource access control method for multi-role users under the WoT architecture is proposed. It solves the problem that the existing protocol can not meet the requirements of the WoT architecture that the user has many roles and can meet the requirements of the resource provider to control the flow.
【作者單位】： 中國(guó)科學(xué)技術(shù)大學(xué)計(jì)算機(jī)科學(xué)與技術(shù)學(xué)院;中國(guó)科學(xué)技術(shù)大學(xué)蘇州研究院網(wǎng)絡(luò)計(jì)算與信息安全研究中心;
【基金】：安徽省自然科學(xué)基金項(xiàng)目(1408085MKL08)資助
【分類號(hào)】：TP393.08

【相似文獻(xiàn)】

相關(guān)碩士學(xué)位論文 前4條

1 屠s，

本文編號(hào)：1558551