【作者】 李博；

【导师】 李晋宏； 孟宪军；

【作者基本信息】 北方工业大学 ， 计算机技术， 2014， 硕士

【摘要】 互联网技术的不断发展推进了各大企业走向信息化时代,越来越多各式各样的系统应运而生。为企业带来巨大便利和利益的同时也带来了一些安全方面的隐患。访问控制的地位日益重要,成为各大系统中不可或缺的部分。中药溯源系统,通过计算机网络技术将中药药材的种植过程,销售过程进行详细的记录与跟踪。由于中药溯源系统的特殊性,它对用户权限要求更加严格。必须尽可能的降低人为因素造成的干扰,权限控制系统显得愈发重要。传统的基于角色的访问控制(RBAC)模型很难适应中药溯源系统对权限的安全需求。因此,有必要对传统的RBAC模型进行改进,以提高权限管理的灵活性。本文在开发中药溯源系统的同时,对传统的访问控制相关知识进行了深入的研究,重点分析了传统的RBAC模型,提出了对传统RBAC模型的改进方法。本文的主要内容如下：1.首先介绍了三种访问控制策略：自主访问控制、强制访问控制和基于角色的访问控制。对比了三者的优缺点,着重介绍基于角色的访问控制策略,确定其更适合中药溯源系统的开发需求。分析了传统的RBAC模型在中药溯源系统中应用的不足,并且给出了相应的解决方案。2.结合中药溯源系统的使用特点以及RBAC模型的基本原则,引入“对象维度”、“组时间维度”以及“时限自主授权”的概念,并对该改进模型的特点进行阐述。3.在RBAC改进模型的基础上,设计并将其应用于某中药企业的溯源系统,最后,给出了RBAC改进模型在实际业务系统中的应用效果。更多还原

【Abstract】 With flourish development of International technology, most enterprises have entering into an informational era, many various systems arises now. These systems have brought huge benefits and convenience to enterprises, however, at the meanwhile, also brought serval security problems. Thus, access control becomes a essential part of system.Traditional Chinese medicine materials traceability system, it traces and records the planting process and selling process of the traditional Chinese medicine materials in detail by using computer techniques. The system has strict limitation to users because of its complexity, so the interference by human factor should be reduced as much as possible. It shows that access control system plays an important role on it. The traditional RBAC model hardly satisfies the traceability’s security needs for permissions. Therefore, it is necessary to improve the traditional RBAC model as the system needs, to increase the safety factor of the permission administration.This article based on the traditional Chinese medicine materials traceability system, I do some research on the traditional access control technology, analyzes the role-based access control (RBAC) model emphatically, and give a improved method of RBAC model. The main content and the innovations of this article are as follow:1. Do the comparison Analysis on the advantages and disadvantages of each common access control model. I also analyze the deficiency of traditional RBAC model, and then determine that RBAC model is more suitable for this system. Analyzes the deficiency of traditional RBAC model and provides the corresponding solutions.2. Combine the usage characteristics of traceability system and the basic principles of RBAC model, I introduce the concept of’object dimension’,’group time dimension’and ’self-authorized within time limitation’. Then state the features of this improved model.3. Based on the improved RBAC model, I participate in the design and realization of the traceability system for a traditional Chinese medicine company. Then with this example, I introduce the combination and application of this improved RBAC model in real Business system.更多还原