臺灣博碩士論文加值系統

在分散式系統中，許多功能常會同時使用到不同主機上的資源，但每個系統一般都會有自己的權限控管，為了能使用這些功能，我們就需要整合不同系統的權限控管。
　　在本篇論文中，我們設計了一個Multi-Domain Controller（MDC）來建立多個RBAC系統之間的合作關係與角色的對應關係。不同系統上的RBAC合作資訊讓MDC知道一個使用者可使用其他系統上的資源，角色對應讓MDC知道一個使用者在其他系統上擁有什麼角色，進而知道此一使用者在其他系統上的權限，我們實作了MDC，並用MDC管理一個實驗室成員入口網與檔案伺服器兩個不同系統的權限控管。

In a distributed system, many functions will use resources in different servers at the same time. Normally, each server has its own access control. In order to use these functions, we need to integrate access control between different servers.

In this thesis, we designed a Multi-Domain Controller (MDC) to coordinate the collaboration and role mapping between different RBAC systems. The collaboration relationship between RBACs lets MDC know that a user could use resources in other systems. MDC knows what role a user can have in other systems through role mapping, and thus knows what permissions a user can have in other systems.

We also implemented the MDC and used it to manage two different RBAC systems, a laboratory member portal system and a laboratory file server.

目錄
摘要 I
Abstract II
致謝 III
目錄 IV
圖形目錄 VI
表格目錄 IX
1. 簡介 1
2. 背景知識 4
2.1 RBAC介紹 4
2.2 Web Service介紹 8
3. 系統設計 10
3.1 MDC概觀 10
3.2 MDC架構 14
3.2.1 MDC權限控管的Web Service 14
3.2.2 MDC系統管理介面 15
3.2.3 MDC核心與資料儲存 17
3.4 MDC的工作模式（透過Web Service） 19
4. 系統實作 22
4.1 MDC開發環境與實作說明 22
4.1.1 MDC的資料儲存 22
4.1.2 MDC的API規格 26
4.1.3 MDC的Web Service 28
4.2 MDC使用範例 30
5. 相關討論 31
5.1 Agent（代理人）簡介 31
5.2 MDC與Agent技術之比較 32
6. 未來展望 34
7. 結論 35
參考文獻 36
附錄一 （Appendix A） 38
A.1使用者登入 38
A.2單一domain的權限控管 40
A.3跨越domain的權限控管 42
A.4使用者登出 48
作者簡介 50

圖形目錄
Figure 1：RBAC元件關係圖 4
Figure 2：Web Service基本架構圖 8
Figure 3：MDC工作模式-使用者登入 12
Figure 4：MDC工作模式-使用者登出 12
Figure 5：MDC工作模式-單一domain權限控管 13
Figure 6：MDC工作模式-多domain檢查控管 13
Figure 7：MDC架構圖 14
Figure 8：AP對MDC進行登入時Web Service呼叫之循序圖 19
Figure 9：AP對MDC進行登出時Web Service呼叫之循序圖 19
Figure 10：進行單一domain權限控管的循序圖 20
Figure 11：進行多個domain權限控管的循序圖 21
Figure 12：一個使用MDC的系統 30
Figure 13：Member Portal登入畫面 39
Figure 14：應用系統呼叫UserLogin的SOAP訊息 39
Figure 15：應用系統呼叫UserLogin的SOAP訊息回應 39
Figure 16：Member Portal登入後畫面 40
Figure 17：應用系統呼叫CheckAccessRight之SOAP訊息(1) 41
Figure 18：MDC呼叫CheckAccess之SOAP訊息(1) 41
Figure 19：MDC呼叫CheckAccess之SOAP訊息回應(1) 41
Figure 20：應用系統呼叫CheckAccessRight之SOAP訊息回應(1) 41
Figure 21：完成權限控管後開啟的畫面(1) 42
Figure 22：一個會取得其他domain資源的功能選擇 43
Figure 23：應用系統呼叫CheckAccessRight之SOAP訊息(2) 44
Figure 24：MDC呼叫CheckAccess之SOAP訊息(2) 44
Figure 25：MDC呼叫CheckAccess之SOAP訊息回應(2) 44
Figure 26：MDC呼叫SessionRoles之SOAP訊息 45
Figure 27：MDC呼叫SessionRoles之SOAP訊息回應 45
Figure 28：MDC呼叫CreateSession之SOAP訊息 45
Figure 29：MDC呼叫CreateSession之SOAP訊息回應 45
Figure 30：MDC呼叫AddActiveRole之SOAP訊息 46
Figure 31：MDC呼叫AddActiveRole之SOAP訊息回應 46
Figure 32：MDC呼叫CheckAccess之SOAP訊息(2) 46
Figure 33：MDC呼叫CheckAccess之SOAP訊息回應(2) 47
Figure 34：MDC呼叫DeleteSession之SOAP訊息 47
Figure 35：MDC呼叫DeleteSession之SOAP訊息回應 47
Figure 36：應用系統呼叫CheckAccessRight之SOAP訊息回應(2) 48
Figure 37：完成權限控管後開啟的畫面(2) 48
Figure 38：應用系統呼叫UserLogout的SOAP訊息 49
Figure 39：應用系統呼叫UserLogin的SOAP訊息回應 49

表格目錄
Table 1：MDC提供之Web Service Method 15
Table 2：合作domain需提供之Web Service規格 18
Table 3：儲存登入資訊的table(MDAC_USER_SESSION) 23
Table 4：儲存登入資訊的table 24
Table 5：儲存domain基本資訊的table 24
Table 6：儲存domain可以提供做對應的table 25
Table 7：儲存domain間角色對應資訊table 25
Table 8：MDAC類別所屬method 26
Table 9：MDCM類別所屬method 27

[1] David F. Ferraiolo , Ravi Sandhu , Serban Gavrila , D. Richard Kuhn , Ramaswamy Chandramouli, “Proposed NIST standard for role-based access control”, ACM Transactions on Information and System Security, Vol.4, No.3, August 2001, pp. 224-274.
[2] Web Services Activity, http://www.w3.org/2002/ws/.
[3] R. Fielding, J. Gettys, J. Mogul, H. Frystyk, L. Masinter, P. Leach, T. Berners-Lee, “Hypertext Transfer Protocol -- HTTP/1.1.”, June 1999. http://www.w3.org/Protocols/rfc2616/rfc2616.txt.
[4] Extensible Markup Language, http://www.w3.org/XML/.
[5] Simple Object Access Protocol, http://www.w3.org/TR/soap/.
[6] Web Services Description Language, http://www.w3.org/TR/wsdl.
[7] Universal Description, Discovery and Integration, http://www.uddi.org/.
[8] A. Walvekar, M. Kelkar, M. Smith, R. Gamble, “Determining Conflicts in Interdomain Mappings for Access Control”, Workshop on Foundations of Computer Security and Automated Reasoning for Security Protocol Analysis, Seattle, August 15 - 16, 2006.
[9] Siqing Du, James B. D. Joshi, “Supporting Authorization Query and Inter-domain Role Mapping in Presence of Hybrid Role Hierarchy”, SACMAT`06, June 7-9, 2006, Lake Tahoe, California, USA, pp. 228-236.
[10] Basit Shafiq, James B. D. Joshi, Elisa Bertino, Arif Ghafoor, “Secure Interoperation in a Multidomain Environment Employing RBAC Policies”, IEEE Transactions on Knowledge and Data Engineering Vol.17, No.11, November 2005, pp. 1557-1577.
[11] Java SE, http://java.sun.com/javase/.
[12] Java Server Page, http://java.sun.com/products/jsp/.
[13] Apache Axis2/Java, http://ws.apache.org/axis2/.
[14] MySQL AB, http://www.mysql.com/.
[15] Object Management Group, “Agent Technology Green Paper”, Agent Working Group OMG Document, Aug 2001.
[16] Danny B. Lange and Mitsuru Oshima, “Seven Good Reasons for Mobile Agents”, Communications of the ACM, Vol.42, No.3, March 1999, pp. 88-89.