基于属性的访问控制(ABAC)能够解决开放网络环境下资源保护所面临的细粒度问题以及网络系统所面临的大规模用户问题,为未来的开放网络环境提供了较为理想的访问控制策略方案.本文从ABAC理论和应用研究两个方面详细分析和总结了ABAC国内外的现有研究成果,分析了ABAC研究尚待解决的问题及未来研究趋势,为未来开放网络环境中的复杂信息系统访问控制研究提供借鉴和文献参考.
Attribute-Based Access Control(ABAC) can address the issues of the fine-granularity of resource protection and the user scalability of network systems,and it can provide appropriate strategies for the access control in the open network environment in the future.This paper in detail analyzes and summarizes the existing domestic and international research achievements in the area of Attribute-Based Access Control from two aspects of the theoretical researches and application researches of ABAC,also analyzes the problems waiting to be solved and some research trends in the area of the ABAC research in the future.It may provide some new insights and literature references for the research of the access control of complex information systems in the open network environment in the future.