適用於雲端環境下之動態服務存取方法

Applying the Dynamic Access Control Method in Cloud System

10.29496/JNDM.201211.0001

蘇品長(Pin-Chang Su)；陳文彬(Wen-Pin Chen)

雲端運算 ； 營運模式 ； 動態存取控制 ； Cloud Computing ； Business Model ； Dynamic Access Control

國防管理學報

33卷2期（2012 / 11 / 01）

1 - 14

繁體中文

雲端運算的興起開闢了新的營運模式，企業可以透過雲端運算優化產業布局、推進專業分工、提升資源利用率、減少初期投資及降低管理開銷等優勢；國軍也希望建立雲端運算環境來改善資源佈署、資安防護及服務提供等功能。但在雲端運算帶來便利性的同時，也面臨相對的安全問題，如何能彈性的使用服務又兼具其安全性將是本研究的重點，因此我們設計一個動態存取控制機制，讓服務的存取更具彈性及安全性，而不像傳統存取控制方法，須依靠龐大資料庫存放用戶權限資料，可能會面臨浪費儲存空間及權限遭竊取之風險。

In recent years, the rise of cloud computing has opened up a brand new business model which makes companies capable to optimize their layouts through cloud computing, promote the division of professional labor, improve resource utilization, reduce the initial investment and reduce cost of management overhead; Our forces (Republic of China Armed Forces) also hope to build a cloud computing environment for improving the resources deployment, information security protection, and provide more services. However when cloud computing is bringing convenience to our lives; the security issues also should be concerned. How can we flexibly access its service without sacrificing security is what this study focus the most, thence, we have designed a dynamic access control mechanism, and that makes the access of service more flexible and secure, instead of traditional access control methods, which might rely on huge databases for storing user permission data and face the waste of storage space and the risk of permission data being steal.