提出了一种第三方的授权服务模型,对现存的信任协商系统起到支撑作用。模型作为一个授权代理,在实体使用信任协商确定一个适当的资源访问策略后,可以在一个开放的系统中发布访问资源的令牌。模型的体系结构设计允许集成新的信任应用程序,也可以间接集成现存传统的应用程序。讨论模型、模型使用的通信协议的设计和实现,以及它的性能。 A third-party authorization service model is proposed, which plays a supportive role in the existing trust negotiation system. Model as an authorized agent, after the entity uses trust negotiation to determine an appropriate resource access policy, it can publish the token to access the resource in an open system. The architectural design of the model allows the integration of new trusted applications as well as the indirect integration of existing legacy applications. Discuss the model, the design and implementation of the communication protocol used by the model, and its performance.