【作者】 杨萍；

【导师】 石坚；

【作者基本信息】 华中科技大学 ， 通信与信息系统， 2007， 硕士

【摘要】 访问控制就是当系统资源受到未经授权的非法操作时,能够提供适当的保护措施。访问控制实质上是对资源使用的限制,决定主体是否可以对客体执行某种操作。本访问控制系统,通过引入角色的概念,将用户映射为在一个组织中的某种角色,把访问权限授权给相应的角色,根据用户拥有的角色进行访问授权与控制,有效整合了传统访问控制技术的优势,又克服了它们的不足,使得制订和执行保护策略的过程更加灵活,也简化了管理员的管理工作。本文以电力通信资源管理系统为实例,详细分析了通信资源信息系统中的访问控制需求,并给出了相关的解决方案。本访问控制方面采用了基于RBAC97的访问控制模型,提出了角色分级管理算法及授权增量设置原则,为电力通信资源管理系统的用户、业务、底层数据提供授权、访问控制、及权限管理的功能。并提供了一个图形化的角色管理工具来简化管理员的工作;由于本访问控制系统构建于J2EE的MVC模式之上,并基于RMI通信技术,使得它能够作为客户UI层与其他各层的中间件,为业务功能层提供授权与访问控制接口,以实现不同功能的业务视图。为底层数据层提供数据控制接口,以实现对不同数据资源的安全访问功能。本文论述了基于RBAC97模型的访问控制系统的设计实现与关键算法,并提出了访问控制系统的发展前景。更多还原

【Abstract】 Access Control is that when access control system resources by unauthorized illegal operation, will be able to provide appropriate protective measures. The essence is that the use of the limited resources, can decide whether or not the main object of performing some operation.The paper by introducing the concept of the role, users map to the organization in a certain role and authority delegated to visit the corresponding role, According to users in the role of authority and control of the visitting . This bring the effective integration of traditional access control technology advantages, Also overcome their deficiencies, making the development and implementation of strategies to protect the process more flexible, also simplifies the administrator’s management.This paper based Electric Power Communication Resources Management System for example, a detailed analysis of the network management system access control needs, presents the solution. The adoption of access control based on RBAC97 access control model, Raised the role of classification management algorithm and management algorithm authorized incremental principles. Provided authorization, access control, and power management functions for the users ,System operations,and Bottom data of the system.and provides a graphical tool for the role of management to simplify the administrator’s work; As a result of the Access Control System Construction in J2EE top of the MVC model, and Communication technology-based RMI, make it as a client UI layer and other layers of middleware, Provided authorization and access control interface for Business function layer to achieve different functions of the business View, Provided data control interface For the bottom layer to achieve different data resources to the security access function .This paper discusses the RBAC97 model based on the Access Control System Design and key algorithm, and the access control system development prospects.更多还原