基于代理技术的多源GIS服务访问控制方法设计与实现

GIS门户用于整合各种来源的GIS服务,并为用户提供统一的GIS服务访问入口.访问控制是GIS门户建设的重要技术基础,现有方法是通过授权机制,授予用户相应GIS服务的访问权限.由于不隐藏原始服务地址,即使用户被取消授权,但因其已获取过原始服务地址,依然可绕过GIS门户访问相应的GIS服务,GIS门户无法对已注册GIS服务的访问情况进行控制.通过代理技术可以有效地隐藏原始服务地址,但由于GIS门户的特殊性,使用现有的代理服务器不仅配置复杂,而且要与GIS门户的授权机制相结合,实现难度大.为解决以上问题,本文基于代理技术的思路,自主研发实现了一种多源GIS服务访问控制方法,采用对注册GIS服务的原始服务地址的隐藏机制,以及建立与之对应的代理服务地址的映射关系,使得被授权用户只能访问代理服务地址,进而实现GIS门户中对注册GIS服务的访问控制.基于此设计实现的SuperMap iPortal注册服务访问控制模块,支持对注册的多源GIS服务进行代理,提供统一的代理服务根地址,方便对多源GIS服务进行统一使用、管理和维护.

Design and Implementation of Multi-source GIS Service Access Control Method Based on Proxy Technology

GIS portal is used to integrate GIS services from a variety of sources, provides users with a unified GIS service access en-try. Access control is an important technical foundation of GIS portal construction, the existing method is through the authorization mechanism, grant the user access to the corresponding GIS services, because the original service address is not hidden, even if the us-er is cancelled authorization, but because it has obtained the original service address, can still bypass the GIS portal to access the cor-responding GIS services, the access to registered GIS services cannot be controlled. Through the proxy technology can effectively hide the original service address, but because of the particularity of GIS portal, the use of existing proxy server is not only complex configu-ration, and difficult to integrate with the GIS portal authorization mechanism, in order to solve the above problems, this paper inde-pendent research and development to achieve the GIS service access control method based on the idea of proxy technology, which uses the hidden mechanism of the original service address of the registered GIS service and establishes the mapping relationship with the corresponding proxy service address, so that the authorized user can only access the proxy service address, and then realize the access control of the GIS service in the GIS portal. SuperMap iPortal Registered Service Access Control Module which implements based on this design, supports for proxy registration multi-source GIS service, provides a unified proxy service root address, to facilitate the u-nified use, management and maintenance of multi-source GIS services.