CAJ | 학술논문

在如今以服务为导向的各种信息系统中，跨域访问已经变得越来越普及，现存的一些跨域访问模型要么不实用，要么不适合WebService。通过提出一种易于扩展的轻量级跨域访问控制框架实现RESTfulWeb服务构架的跨域访问控制和代理，达到了跨域访问交互双方无需预定义信任关系，该框架还结合已有的Web安全技术实现扩展安全策略执行，并以微小系统开销实现跨域交互的隐私保护。最后实现了一个原型演示系统证实了该框架在SOA构架中跨域访问的可行性。
재여금이복무위도향적각충신식계통중，과역방문이경변득월래월보급，현존적일사과역방문모형요요불실용，요요불괄합WebService。통과제출일충역우확전적경량급과역방문공제광가실현RESTfulWeb복무구가적과역방문공제화대리，체도료과역방문교호쌍방무수예정의신임관계，해광가환결합이유적Web안전기술실현확전안전책략집행，병이미소계통개소실현과역교호적은사보호。최후실현료일개원형연시계통증실료해광가재SOA구가중과역방문적가행성。
Nowadays cross-domain resource sharing and collaborations becomes prevalent in today＇s service-oriented organizations. Existing approaches for the realization of cross-domain access control focus only on the model level without concrete implementation mechanisms, or is not general enough to provide a flexible framework for enterprise web applications. This paper proposes a framework for the realization of cross-domain access control and proxy with RESTful Web service architecture. With focus on real issues under the context of cross-domain access scenarios such as no predefined trust relationship between a service provider domain and service requestor domain, the evaluation demonstrates that this is a feasible framework towards general cross-domain access control for service-oriented architectures.