| 59 | 1 | 125 |
| 下载次数 | 被引频次 | 阅读次数 |
在对基于角色访问控制模型RBAC研究的基础上,针对WEB信息系统的特点提出1种全新的访问控制模型——RBACWIS。RBACWIS模型将访问控制从WEB信息系统的视图层和业务逻辑层中分离出来,实现访问控制的集中管理。彻底地解决了传统WEB信息系统中视图层和业务逻辑层中夹杂大量访问控制代码,使视图层更新困难和访问控制代码分散难以管理维护等问题。
Abstract：In the paper,a new kind of access control modelRBACWIS(Role Based Access Control for Web Information System) is proposed,concentrating on the characters of web Information System.In the system,it uses the centralized access control module,so it separates the access control management from the view layer to the business layer.It solves the problems about the traditional web information system such as access control codes mixed in the view layer,which will lead to the difficulties of updating view layer and managing the dispersive access control codes and so on.
[1]Roosdiana W,Zahir Tari.A role based access control for webServices[C].//Proc of IEEE International Conference on Services Comput-ing,2004,49-56.
[2]Elisa B,Anna C S.A flexible access control model for Web services[C].//Proc of FQAS’04,Lyon,France,2004,13-16.
[3]Centonze P,Naumovich G,Fink S J,et al.Role-based access controlconsistency validation[C].ISSTA,Portland Maine USA:2006,121-132.
[4]Damiani E,Vimercati S,Paraboschi S,et al.A fine-grained accesscontrol system for XML documents[J],ACM Transactions on Infor-mation Systems Security,2002,5(2):169-202.
[5]李卿,乔元松,郑慧.角色分离的层次化RBAC模型[J].计算机工程与设计,2005,26(6):1563-1585.
基本信息:
DOI：10.16441/j.cnki.hdxb.2008.s1.011
中图分类号:TP311.52
引用信息:
[1]刘军,张金奎,温占考,等.适用于WEB信息系统的访问控制模型RBACWIS[J].中国海洋大学学报(自然科学版),2008,38(S1):37-40.DOI:10.16441/j.cnki.hdxb.2008.s1.011.
基金信息:
国家高技术研究发展计划项目(2006AA01Z214);; 国家自然科学基金项目(60673159,70671020);; 新世纪优秀人才支持计划资助项目;; 教育部科学技术研究重点项目(108040);; 高等学校博士学科点专项科研基金项目(20060145012,20070145017);; 辽宁省自然科学基金项目(20062022);; 长江学者和创新团队发展计划资助
2008-10-15
2008-10-15