CAPODAZ：一种使用微服务的容器化授权和策略驱动架构
CAPODAZ: A Containerised Authorisation and Policy-driven Architecture using Microservices
摘要：
微服务架构方法对于敏捷应用程序的开发和复杂解决方案的交付具有重要的好处。然而，为了以可验证和无状态的方式在服务之间传递信息和共享数据，需要启用适当的访问控制方法和授权。在本文中，我们研究了在使用混合基于云的基础设施和物联网（IoT）服务的真实世界机器对机器（M2M）场景中使用独立细粒度微服务的策略驱动授权。我们还对促进所涉及实体之间的消息交换的认证流进行了建模，并使用微服务范式提出了一个容器化的授权和策略驱动架构（CAPODAZ）。所提出的架构实现了基于策略的管理框架，并集成了正在进行的关于云物联网智能交通服务的工作。为了进行深入的定量评估，我们处理了用户群体的多种分布，并针对其他类似的微服务评估了所提出的架构。基于实验数据的数值结果表明，在延迟，吞吐量和成功的请求方面存在显着的性能优势。
英文摘要：
The microservices architectural approach has important benefits regarding the agile applications' development and the delivery of complex solutions. However, to convey the information and share the data amongst services in a verifiable and stateless way, there is a need to enable appropriate access control methods and authorisations. In this paper, we study the use of policy-driven authorisations with independent fine-grained microservices in the case of a real-world machine-to-machine (M2M) scenario using a hybrid cloud-based infrastructure and Internet of Things (IoT) services. We also model the authentication flows which facilitate the message exchanges between the involved entities, and we propose a containerised authorisation and policy-driven architecture (CAPODAZ) using the microservices paradigm. The proposed architecture implements a policy-based management framework and integrates in an on-going work regarding a Cloud-IoT intelligent transportation service. For the in-depth quantitative evaluation, we treat multiple distributions of users' populations and assess the proposed architecture against other similar microservices. The numerical results based on the experimental data show that there exists significant performance preponderance in terms of latency, throughput and successful requests.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
