Nadziranje pristupa računalnim sustavima zasnovanim na uslugama

scientific master's theses

• Author: Miroslav Popović
• Mentor: Siniša Srbljić (mentor)
• Committee member: Leo Budin (predsjednik povjerenstva)
• Committee member: Siniša Srbljić (član povjerenstva)
• Committee member: Darko Huljenić (član povjerenstva)
• Granter: University of Zagreb; Faculty of Electrical Engineering and Computing; (Department of Electronics, Microelectronics, Computer and Intelligent Systems); Zagreb
• Defense date and country: 2006-05-26, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Computing
• Universal decimal classification (UDC): 004 - Computer science and technology. Computing. Data processing

Abstract

Nadzor pristupa uslugama predstavlja neizostavnu funkcionalnost računalnih sustava zasnovanih na uslugama. Usluge računalnih sustava udružuju se u zaštićene domene primjenom specijaliziranih sigurnosnih sustava za nadzor pristupa. Magistarski rad opisuje arhitekturu i programsko ostvarenje sustava Nadzornik kojim se uspostavlja zaštićena domena i nadzire pristup uslugama ostvarenim primjenom Web Services tehnologija. Sustav omogućuje učlanjivanje korisnika i usluga u zaštićenu domenu sustava Nadzornik primjenom postupaka registracije i autentikacije. Dodatno, sustav ostvaruje mehanizme putem kojih nadzire pristup uslugama u zaštićenoj domeni. Sustav se sastoji od podsustava Provedba pristupa i podsustava Uspostava pristupa. Podsustav Uspostava pristupa ostvaruje funkcionalnosti registracije i autentikacije putem otvorenih i standardiziranih sučelja. Podsustav Provedba pristupa ostvaruje zaštićenu domenu i izvodi nadzor pristupa uslugama na gruboj i visokoj razini razlučivosti. Tijekom nadzora pristupa uslugama, podsustavi Provedba pristupa i Uspostava pristupa razmjenjuju upravljačke podatke. U okviru rada definiran je novi mješoviti model razmjene upravljačkih podataka između podsustava Provedba pristupa i Uspostava pristupa metodom ponude-potražnje. Definirani model prilagođen je razmjeni upravljačkih podataka u raspodijeljenoj okolini u kojoj se podsustavi Provedba pristupa i Uspostava pristupa nalaze na udaljenim računalima.

Abstract (english)

Access control is a critical mechanism for enforcing security in service-oriented information systems. Services of information systems are grouped into protected domains established by specialized access control security systems. The master thesis presents architecture and implementation of access control system named Access. Access system is developed to establish protected domain and control access to services implemented as Web Services. Registration and authentication of Access system allow new users and services to join to protected domain. Moreover, Access system establishes access control mechanisms and ensures secure and controlled access to services. The system consists of Access Decision Function and Access Enforcement Function subsystems. Access Decision Function subsystem provides registration and authorization through well-defined, open, and standardized interfaces. Access Enforcement Function subsystem implements protected domain and enforces coarse-grained and fine-grained access control. Access Decision Function and Access Enforcement Function subsystems exchange access control data. The thesis defines new hybrid push-pull model for exchanging access control data. Hybrid pushpull data exchange model is applicable for exchanging access control data when Access Enforcement Function and Access Decision Function subsystems are located on remote machines of distributed environment.

• Keywords: raspodijeljeni sustavi; otvoreni sustavi; Internet; računarstvo zasnovano na uslugama; sigurnost; sigurnosna prepreka; nadzor pristupa; odredbe nadzora pristupa; zastupnik nadzora pristupa
• Keywords (english): distributed systems; open-ended systems; Internet; Service-Oriented Computing (SOC); security; firewall; access control; access control policy; access control proxy
• Language: croatian
• URN:NBN: urn:nbn:hr:168:884258
• Study programme: Title: Postgraduate master programe in computing; Study programme type: university; Study level: postgraduate; Academic / professional title: magistar inženjer računarstva (magistar inženjer računarstva)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Closed access
• Created on: 2019-06-18 15:42:04