ABAC model based on XACML in Web Service
Web服务中结合XACML的基于属性的访问控制模型

The XACML(eXtensible Access Control Markup Language) was analyzed,and an ABAC(Attribute-Based Access Control) model based on XACML in Web Service was presented.The model adopted the authorization mechanism based on user,resource and environment attributes,but not user identity.This mechanism can resolve administrative scalability problem and provide fine-grained access control for Web services,and it is fit for highly dynamic and distributed environment in Web services.